CVE-2008-5869: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Proxim Wireless Tsunami MP.11 2411 with firmware 3.0.3 allows remote authenticated users to inject arbitrary web script or HTML via the system.sysName.0 SNMP OID...

Aruba Networks ArubaOS SNMP公共串信息泄漏漏洞

BUGTRAQ ID: 32102 CNCAN ID：CNCAN-2008110501 Aruba Mobility Controller是一款为企业提供移动接入的解决方案。 Aruba Mobility Controller SNMP协议实现存在信息泄漏问题，远程攻击者可以利用漏洞获得敏感信息对设备进行攻击。 Aruba Mobility Controller可通过SNMP协议监视。存在只要公共串的其中之一个给攻击者知晓的情况下，可获得所有配置的SNMP公告串。这可通过OID分支SNMP-COMMUNITY-MIB::snmpCommunityName...

CVE-2008-3539

Unspecified vulnerability in HP OpenView Select Identity HPSI Connectors on Windows, as used in HPSI Active Directory Connector 2.30 and earlier, HPSI SunOne Connector 1.14 and earlier, HPSI eDirectory Connector 1.12 and earlier, HPSI eTrust Connector 1.02 and earlier, HPSI OID Connector 1.02 and...

HP OpenView Select Identity Connectors本地信息泄漏漏洞

BUGTRAQ ID: 31024 CVE ID: CVE-2008-3539 CNCVE ID：CNCVE-20083539 HP OpenView Select Identity Connectors是一款身份管理解决方案包含的组件。 Windows平台下的HP OpenView Select Identity Connectors存在未明安全问题，本地攻击者可以利用漏洞获得敏感信息。 目前没有详细漏洞细节提供。 HP HPSI TOPSecret Connector 2.22.1 HP HPSI SunOne Connector 1.14 HP HPSI RACF Connecto...

Oracle Internet Directory 10.1.4 - Remote Denial of Service

Oracle Internet Directory 10.1.4 - Remote Denial of Service !/usr/bin/python """ Oracle Internet Directory 10.1.4 preauthentication Denial Of Service NOTES: Under 32 bits platforms it crashes immediately. Under 64 bits it may take even hours. Sometimes you need 2 shoots to crash OID completely. T...

F5 FirePass 1200 SNMP daemon DoS

F5 FirePass 1200 SNMP daemon DoS Product: F5 FirePass 1200 http://www.f5.com/products/firepass/ The F5 FirePass 1200 SSL VPN appliance contains a denial-of-service vulnerability in the SNMP daemon. Traversing walking OID branch hrSWInstalled in HOST-RESOURCES-MIB OID 1.3.6.1.2.1.25.6 will cause t...

F5 FirePass SSL VPN SNMP守护程序远程拒绝服务漏洞

BUGTRAQ ID: 30090 CNCAN ID：CNCAN-2008070810 F5 FirePass SSL VPN设备允许用户安全的连接到关键业务应用设备上。 F5 FirePass 1200 SSL VPN应用设备包含的SNMP守护程序存在拒绝服务问题，远程攻击者可以利用漏洞使应用程序崩溃。 遍历HOST-RESOURCES-MIB OID 1.3.6.1.2.1.25.6中的hrSWInstalled OID分支可导致SNMP守护程序崩溃，目前不清楚是否可利用执行任意代码。 F5 FirePass 6.0.2.3 F5 FirePass 1200 目前没有解决方案提供：...

CVE-2008-0846: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in the comprofile component for Joomla! allows remote attackers to execute arbitrary SQL commands via the oid parameter...

CVE-2006-6385: Undefined Security Weakness

Stack-based buffer overflow in Intel PRO 10/100, PRO/1000, and PRO/10GbE PCI, PCI-X, and PCIe network adapter drivers aka NDIS miniport drivers before 20061205 allows local users to execute arbitrary code with "kernel-level" privileges via an incorrect function call in certain OID handlers...

security flaw

Off-by-one error in the dergetoid function in modauthkerb 5.0 allows remote attackers to cause a denial of service crash via a crafted Kerberos message that triggers a heap-based buffer overflow in the component array...

CVE-2006-4267: Undefined Security Weakness

Multiple SQL injection vulnerabilities in CubeCart 3.0.11 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 oid parameter in modules/gateway/Protx/confirmed.php and the 2 xinvoicenum parameter in modules/gateway/Authorize/confirmed.php...

security flaw

Off-by-one error in the OID printing routine in Ethereal 0.10.x up to 0.10.14 has unknown impact and remote attack vectors...

Fedora Core 5 : ethereal-0.99.0-fc5.1 (2006-456)

Many security vulnerabilities have been fixed since the previous release. - The H.248 dissector could crash. Versions affected: 0.10.14. CVE: CVE-2006-1937 - The UMA dissector could go into an infinite loop. Versions affected: 0.10.12 - 0.10.14. CVE: CVE-2006-1933 - The X.509if dissector could...

Design/Logic Flaw

Off-by-one error in the OID printing routine in Ethereal 0.10.x up to 0.10.14 has unknown impact and remote attack vectors...

CVE-2006-1932

Off-by-one error in the OID printing routine in Ethereal 0.10.x up to 0.10.14 has unknown impact and remote attack vectors...

CVE-2006-1932

Off-by-one error in the OID printing routine in Ethereal 0.10.x up to 0.10.14 has unknown impact and remote attack vectors...

CVE-2006-1932

CVE-2006-1932 (and related CVEs 1933–1940) affect Ethereal up to version 0.10.14, via multiple dissectors and the OID printing routine, causing off-by-one errors, infinite loops, buffer overruns, crashes or aborts. Public advisories (Debian DSA-1049-1, RHSA-2006:0420, Gentoo GLSA 200604-17, OpenV...

Ethereal 0.99.0 Release Notes

Ethereal 0.99.0 Release Notes Table of Contents What is Ethereal? What's New Bug Fixes New and Updated Features New Protocol Support Updated Protocol Support New and Updated Capture File Support Getting Ethereal Microsoft Windows Sun Solaris Source Code Vendor-supplied Packages File Locations Kno...

CVE-2006-1932: Undefined Security Weakness

Off-by-one error in the OID printing routine in Ethereal 0.10.x up to 0.10.14 has unknown impact and remote attack vectors...

SNMP Query Installed Software Disclosure

It is possible to obtain the list of installed software on the remote host by sending SNMP requests with the OID 1.3.6.1.2.1.25.6.3.1.2 An attacker may use this information to gain more knowledge about the target host. TRUSTED...