[VulnWatch] iDefense Security Advisory 01.17.06: Cisco Systems IOS 11 Web Service CDP Status Page Code Injection Vulnerability

Cisco Systems IOS 11 Web Service CDP Status Page Code Injection Vulnerability iDefense Security Advisory 01.17.06 http://www.idefense.com/intelligence/vulnerabilities/display.php?id=372 January 17, 2006 I. BACKGROUND Cisco IOS Software is the world's leading network infrastructure software,...

SureCom EP-9510AX/EP-4504AX Network Device - Malformed Web Authorisation Request Denial of Service (2)

// source: https://www.securityfocus.com/bid/9795/info An issue in the handling of specific web requests by SureCom network devices has been identified. By placing a malformed request to the web configuration interface, it is possible for an attacker to deny service to legitimate users of a...

Cisco IOS Malformed IPv4 Packet Remote DoS

According to its version number, the remote router or switch is running a vulnerable version of Cisco IOS. Sending a specific sequence of IPv4 packets can cause the input interface to stop accepting traffic. Note that this vulnerability does not affect devices that only use IPv6. C Tenable Networ...

3Com TelnetD

I noticed that there are infinity retries and no delay enabled at 3Com hardware, so I wrote this little Telnetcracker for this problem. I send it to 3Com, but I think they weren't bothered much about that. They sended me a notice to provide hardware serial and my name etc. ....strange... = This...

CVE-1999-0508

An account on a router, firewall, or other network device has a default, null, blank, or missing password...

CVE-1999-0507

An account on a router, firewall, or other network device has a guessable password...

CVE-1999-0508: Undefined Security Weakness

An account on a router, firewall, or other network device has a default, null, blank, or missing password...

CVE-1999-0507: Undefined Security Weakness

An account on a router, firewall, or other network device has a guessable password...

Ascend CascadeView/UX 1.0 tftpd - Symbolic Link

source: https://www.securityfocus.com/bid/910/info The tftpd bundled with CascadeView for Ascend's B-STDX 8000/9000 network devices creates a log in /tmp called tftpdxferstatus.log. If /tmp/tftpdxferstatus.log already exists as a symbolic link, tftpd will follow it and overwrite any data it point...

CVE-1999-0507

An account on a router, firewall, or other network device has a guessable password...

PT-1998-1093 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The issue concerns an account on a network device, such as a router or firewall, that has a password which can be easily guessed. Recommendations: At the moment, there is no...

CVE-2023-47005

Concrete details link a vulnerability to ASUS RT-AX57 (PT-2023-7096): version 3.0.0.4 386 52041 is affected. The issue arises from insufficient input validation in the sub ln 2C318 function of the router’s microprogram, enabling a remote attacker to execute arbitrary code by crafting a request to...