Denial of service in Brocade switches (was: Engenio/LSI Logic controllers denial of service/data corruption)

This is a modified advisory about the specific Brocade case. Product : all Brocade fiber channel switches running pre-3.2 code including Silkworm 3800, Silkworm 3200 and Silkworm 2800. Vuln. : Remotely exploitable denial of service Date : 09/05/2004 Author : Frank Denis [email protected], tested by...

Engenio/LSI Logic controllers denial of service/data corruption

Product : Engenio/LSI Logic storage controllers, including: - Storagetek D280 verified, - IBM FastT 100 verified, - Probably all other Storagetek and IBM FastT storage controllers since the software part is almost identical, - Maybe some SGI and Teradata storage controllers unverified, - Some...

D-Link DCS-900 Camera - Remote IP Address Changer

D-Link DCS-900 Camera - Remote IP Address Changer / dlinkdown.c - miscname.com change ip address on all dlink dcs-900 cameras on the local network without authentication dlink dcs-900 ip cameras use a broadcast/listen method of configuration ... rather than a static ip addr out of the box, it...

D-Link DCS-900 Camera - Remote IP Address Changer

/ dlinkdown.c - miscname.com change ip address on all dlink dcs-900 cameras on the local network without authentication dlink dcs-900 ip cameras use a broadcast/listen method of configuration ... rather than a static ip addr out of the box, it listens for a 62976/udp broadcast packet telling it...

D-Link DCS-900 Camera Remote IP Address Changer Exploit

No description provided by source. / dlinkdown.c - miscname.com change ip address on all dlink dcs-900 cameras on the local network without authentication dlink dcs-900 ip cameras use a broadcast/listen method of configuration ... rather than a static ip addr out of the box, it listens for a...

SUSE-SA:2003:0008: imp

The remote host is missing the patch for the advisory SUSE-SA:2003:0008 imp. IMP is a well known PHP-based web-mail system. Some SQL-injection vulnerabilities were found in IMP 2.x that allow an attacker to access the underlying database. No authentication is needed to exploit this bug. An attack...

Check Point ISAKMP vulnerable to buffer overflow via Certificate Request

Overview A buffer overflow vulnerability exists in the Internet Security Association and Key Management Protocol ISAKMP implementation used in Check Point VPN-1, SecuRemote, and SecureClient products. An unauthenticated, remote attacker could execute arbitrary code with the privileges of the ISAK...

Oracle E-Business Suite Report Review Agent (RRA) allows arbitrary files to be retrieved with no authentication

Overview A vulnerability in Oracle's E-Business Suite Report Review Agent RRA allows arbitrary files to be retrieved with no authentication. Description A vulnerability exists in the Oracle E-Business Suite Report Review Agent RRA. This vulnerability may allow a remote attacker to retrieve...

Ericsson HM220dp DSL Modem - World Accessible Web Administration Interface

Ericsson HM220dp DSL Modem - World Accessible Web Administration Interface source: https://www.securityfocus.com/bid/6824/info The Ericsson HM220dp DSL Modem uses a web interface for remote administration and configuration. This interface does not require any authentication in order to access...

Microsoft Windows Locator Service Buffer Overflow Vulnerability

Description It has been reported that the Microsoft Windows Locator service is affected by a remotely exploitable buffer overflow vulnerability. The condition is due to a memory copy of RPC arguments received from remote clients into a local buffer. This vulnerability may be exploited by remote...

Microsoft Windows XP/2000/NT 4.0 - Locator Service Buffer Overflow

source: https://www.securityfocus.com/bid/6666/info It has been reported that the Microsoft Windows Locator service is affected by a remotely exploitable buffer overflow vulnerability. The condition is due to a memory copy of RPC arguments received from remote clients into a local buffer. This...

CVE-2002-0502

CVE-2002-0502 affects Citrix NFuse 1.6. Affected component: applist.asp handling within NFuse, enabling remote attackers to list available applications without authentication. Root cause is improper access control on the applist.asp endpoint, leading to potential information disclosure. CVSS metr...

PVote 1.0/1.5 - Unauthorized Administrative Password Change

source: https://www.securityfocus.com/bid/4541/info PVote is a web voting system written in PHP. It will run on most Unix and Linux variants as well as Microsoft Windows operating systems. It is possible to change the administrative password by submitting a malicious web request containing the...

CVE-2002-0134

Telnet proxy in Avirt Gateway Suite 4.2 does not require authentication for connecting to the proxy system itself, which allows remote attackers to list file contents of the proxy and execute arbitrary commands via a "dos" command...

CVE-2001-1223

The CVE-2001-1223 entry concerns the web administration server of ELSA Lancom 1100 Office. The vulnerability is that the web admin interface does not require authentication, allowing arbitrary remote attackers to gain administrative privileges by connecting to the server (network exposure). The a...

CVE-2001-1223

The web administration server for ELSA Lancom 1100 Office does not require authentication, which allows arbitrary remote attackers to gain administrative privileges by connecting to the server...

Tektronix Phaser 740750850930 - Network Printer Administration Interface

Tektronix Phaser 740750850930 - Network Printer Administration Interface source: https://www.securityfocus.com/bid/2659/info A remote vulnerability exists in Tektronix Phaser network printers in the 7xx, 8xx, and 9xx series. An attacker with access to the printer's local network or, if no firewal...

CVE-2001-0086

CGI Script Center Subscribe Me LITE 2.0 and earlier allows remote attackers to delete arbitrary mailing list users without authentication by directly calling subscribe.pl with the target address as a parameter...

CVE-1999-0795

CVE-1999-0795 concerns the NIS+ rpc.nisd server, which is affected by an unauthenticated remote RPC-call execution vulnerability. The Red Hat and NVD records describe that remote attackers can trigger certain RPC calls to obtain system information, disable logging, or modify caches via the NIS+ s...

CVE-2000-0058

CVE-2000-0058 affects HotSync Manager (Handsᴘʀᴛ Visor ecosystem). The OpenVAS NASL entry describes a Denial of Service: sending garbage to TCP port 14238 can crash HotSync Manager. CVSS 2.0 base score 5.0 (Network, low complexity, no authentication). The NVD/CVE records cite an authentication iss...