CVE-2012-1365

CVE-2012-1365 affects Cisco UCS (UCS) 1.4 and 2.0, where remote authenticated users can trigger a denial-of-service (device reload) by sending a malformed SNMP request to a Fabric Interconnect (FI). Root cause relates to SNMP message processing; the issue is tied to Bug ID CSCts32463. Cisco’s adv...

CVE-2012-1364

Cisco UCS Fabric Interconnect SNMP processing vulnerability (CVE-2012-1364) affects Cisco UCS 1.4 and 2.0. An authenticated, remote attacker can trigger a DoS (device reload) by sending malformed SNMP requests to the FI device. Root cause relates to errors in SNMP message processing. Cisco adviso...

CVE-2012-1364

Cisco Unified Computing System UCS 1.4 and 2.0 allows remote authenticated users to cause a denial of service device reload via a malformed SNMP request to a Fabric Interconnect FI device, aka Bug ID CSCts32452...

Scientific Linux Security Update : net-snmp on SL6.x i386/x86_64 (20120620)

The net-snmp packages provide various libraries and tools for the Simple Network Management Protocol SNMP, including an SNMP library, an extensible agent, tools for requesting or setting information from SNMP agents, tools for generating and handling SNMP traps, a version of the netstat command...

Scientific Linux Security Update : net-snmp on SL5.x, SL4.x, SL3.x i386/x86_64

A flaw was discovered in the way net-snmp handled certain requests. A remote attacker who can connect to the snmpd UDP port 161 by default could send a malicious packet causing snmpd to crash, resulting in a denial of service. CVE-2007-5846 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

Scientific Linux Security Update : net-snmp on SL3.x, SL4.x, SL5.x i386/x86_64

A denial-of-service flaw was found in the way Net-SNMP processes SNMP GETBULK requests. A remote attacker who issued a specially crafted request could cause the snmpd server to crash. CVE-2008-4309 Note: An attacker must have read access to the SNMP server in order to exploit this flaw. In the...

Scientific Linux Security Update : net-snmp on SL3.x i386/x86_64

A divide-by-zero flaw was discovered in the snmpd daemon. A remote attacker could issue a specially crafted GETBULK request that could crash the snmpd daemon. CVE-2009-1887 Note: An attacker must have read access to the SNMP server in order to exploit this flaw. In the default configuration, the...

Scientific Linux Security Update : net-snmp on SL3.x i386/x86_64

It was discovered that the snmpd daemon did not use TCP wrappers correctly, causing network hosts access restrictions defined in '/etc/hosts.allow' and '/etc/hosts.deny' to not be honored. A remote attacker could use this flaw to bypass intended access restrictions. CVE-2008-6123 This issue only...

Scientific Linux Security Update : hplip on SL5.x i386/x86_64

A flaw was found in the way certain HPLIP tools discovered devices using the SNMP protocol. If a user ran certain HPLIP tools that search for supported devices using SNMP, and a malicious user is able to send specially crafted SNMP responses, it could cause those HPLIP tools to crash or, possibly...

Scientific Linux Security Update : net-snmp on SL3.x, SL4.x, SL5.x i386/x86_64

A flaw was found in the way Net-SNMP checked an SNMPv3 packet's Keyed-Hash Message Authentication Code HMAC. An attacker could use this flaw to spoof an authenticated SNMPv3 packet. CVE-2008-0960 A buffer overflow was found in the Perl bindings for Net-SNMP. This could be exploited if an attacker...

CentOS Update for hpijs3 CESA-2011:0154 centos5 x86_64

Check for the Version of hpijs3 OpenVAS Vulnerability Test CentOS Update for hpijs3 CESA-2011:0154 centos5 x8664 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

CentOS Update for net-snmp CESA-2012:0876 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CentOS Update for hpijs CESA-2011:0154 centos5 x86_64

Check for the Version of hpijs OpenVAS Vulnerability Test CentOS Update for hpijs CESA-2011:0154 centos5 x8664 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

CentOS Update for net-snmp CESA-2012:0876 centos6

Check for the Version of net-snmp OpenVAS Vulnerability Test CentOS Update for net-snmp CESA-2012:0876 centos6 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

CentOS Update for hpijs3 CESA-2011:0154 centos5 x86_64

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

RealNetworks Helix Server SNMP Master Agent Open-PDU Denial of Service

A denial of service vulnerability has been reported in RealNetworks Helix server...

CentOS Update for hpijs CESA-2011:0154 centos5 x86_64

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

SpiceWorks 5.3.75941 - Persistent Cross-Site Scripting / (Authenticated) SQL Injection

Product: SpiceWorks Version: 5.3.75941 Vendor Site: http://www.spiceworks.com/community/ Software Download Link: http://www.spiceworks.com/download/?utmsource=comm-secondary-link&utmmedium=website&utmcampaign=homepage Installer Filename: Spiceworks.exe MD5: 023bd361c0f9402dc07adbc5a72fe31d Contac...

SpiceWorks 5.3.75941 - Persistent Cross-Site Scripting (Authenticated) SQL Injection

SpiceWorks 5.3.75941 - Persistent Cross-Site Scripting Authenticated SQL Injection Product: SpiceWorks Version: 5.3.75941 Vendor Site: http://www.spiceworks.com/community/ Software Download Link:...

SuSE 10 Security Update : net-snmp (ZYPP Patch Number 8153)

This update to net-snmp resolves the following issues : - Specially crafted SNMP GET requests could cause a denial of service application crash via a heap-based out-out-bounds read flaw which could be exploited remotely. CVE-2012-2141 - After rotating the net-snmp log file, use 'try-restart' to...