Authentication flaw

PatrolAgent.exe in BMC Performance Manager does not require authentication for requests to modify configuration files, which allows remote attackers to execute arbitrary code via a request on TCP port 3181 for modification of the masterAgentName and masterAgentStartLine SNMP parameters. NOTE: the...

CVE-2007-1972

PatrolAgent.exe in BMC Performance Manager does not require authentication for requests to modify configuration files, which allows remote attackers to execute arbitrary code via a request on TCP port 3181 for modification of the masterAgentName and masterAgentStartLine SNMP parameters. NOTE: the...

CVE-2007-1972

PatrolAgent.exe in BMC Performance Manager does not require authentication for requests to modify configuration files, which allows remote attackers to execute arbitrary code via a request on TCP port 3181 for modification of the masterAgentName and masterAgentStartLine SNMP parameters. NOTE: the...

BMC Performance Manager PatrolAgent.EXE内存破坏漏洞

BMC Performance Manager是一款端到端系统管理解决方案。 BMC Performance Manager存在设计错误，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 PatrolAgent.exe监听TCP 3181端口，服务允许远程攻击者修改配置文件而不需要任何验证。攻击者修改在SNMP公共定义中的参数，如masterAgentName和masterAgentStartLine可导致任意代码执行。 BMC Software Performance Manager 目前没有解决方案提供： http://www.bmc.com/...

BMC Performance Manager unauthorized access

PatrolAgent.exe TCP/3181 allows SNMP community definition modification...

ZDI-07-020: BMC Performance Manager SNMP Command Execution Vulnerability

ZDI-07-020: BMC Performance Manager SNMP Command Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-020.html April 18, 2007 -- CVE ID: CVE-2007-1972 -- Affected Vendor: BMC -- Affected Products: Performance Manager -- TippingPointTM IPS Customer Protection: TippingPoint IP...

BMC Performance Manager SNMP Command Execution Vulnerability

These vulnerabilities allows attackers to execute arbitrary code on vulnerable installations of BMC Performance Manager. User interaction is not required to exploit this vulnerability. The specific flaw exists in the PatrolAgent.exe listening on TCP port 3181. The service allows remote attackers ...

CVE-2007-2036

The SNMP implementation in the Cisco Wireless LAN Controller WLC before 20070419 uses the default read-only community public, and the default read-write community private, which allows remote attackers to read and modify SNMP variables, aka Bug ID CSCse02384...

Design/Logic Flaw

The SNMP implementation in the Cisco Wireless LAN Controller WLC before 20070419 uses the default read-only community public, and the default read-write community private, which allows remote attackers to read and modify SNMP variables, aka Bug ID CSCse02384...

CVE-2007-2036

CVE-2007-2036 refers to a vulnerability in the Cisco Wireless LAN Controller (WLC) where the SNMP implementation (pre-20070419) uses default read-only public and read-write private communities. This allows remote attackers to read and modify SNMP variables, potentially gaining full access to SNMP...

CVE-2007-2036

The SNMP implementation in the Cisco Wireless LAN Controller WLC before 20070419 uses the default read-only community public, and the default read-write community private, which allows remote attackers to read and modify SNMP variables, aka Bug ID CSCse02384...

Cisco Security Advisory: Multiple Vulnerabilities in the Cisco Wireless LAN Controller and Cisco Lightweight Access Points

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Multiple Vulnerabilities in the Cisco Wireless LAN Controller and Cisco Lightweight Access Points Advisory ID: cisco-sa-20070412-wlc http://www.cisco.com/warp/public/707/cisco-sa-20070412-wlc.shtml Revision 1.0 For Public...

Cisco Wireless LAN Controller multiple security vulnerabilities

Default SNMP communities, default passwords, DoS on Ethrenet frames parsing, multiple NPU DoS conditions, WLAN ACLs are lost during reboot...

CVE-2005-4837

snmpapi.c in snmpd in Net-SNMP 5.2.x before 5.2.2, 5.1.x before 5.1.3, and 5.0.x before 5.0.10.2, when running in master agentx mode, allows remote attackers to cause a denial of service crash by causing a particular TCP disconnect, which triggers a free of an incorrect variable, a different...

CVE-2005-4837

snmpapi.c in snmpd in Net-SNMP 5.2.x before 5.2.2, 5.1.x before 5.1.3, and 5.0.x before 5.0.10.2, when running in master agentx mode, allows remote attackers to cause a denial of service crash by causing a particular TCP disconnect, which triggers a free of an incorrect variable, a different...

CVE-2005-4837

Net-SNMP vulnerability CVE-2005-4837 affects snmpd in master agentX mode across 5.2.x (before 5.2.2), 5.1.x (before 5.1.3), and 5.0.x (before 5.0.10.2). Exploitation could cause remote denial of service (crash) by triggering a specific TCP disconnect, freeing an incorrect variable. This is a dist...

Solaris 10 (sparc) : 124939-05 (deprecated)

Vulnerability in the Solaris component of Oracle and Sun Systems Products Suite subcomponent: Cacao. Supported versions that are affected are 10 and 11.1. Difficult to exploit vulnerability allows successful unauthenticated network attacks via SNMP. Successful attack of this vulnerability can...

Solaris 10 (x86) : 124939-05 (deprecated)

Vulnerability in the Solaris component of Oracle and Sun Systems Products Suite subcomponent: Cacao. Supported versions that are affected are 10 and 11.1. Difficult to exploit vulnerability allows successful unauthenticated network attacks via SNMP. Successful attack of this vulnerability can...

CVE-2007-1413

Buffer overflow in the snmpget function in the snmp extension in PHP 5.2.3 and earlier, including PHP 4.4.6 and probably other PHP 4 versions, allows context-dependent attackers to execute arbitrary code via a long value in the third argument object id...

CVE-2007-1413

Buffer overflow in the snmpget function in the snmp extension in PHP 5.2.3 and earlier, including PHP 4.4.6 and probably other PHP 4 versions, allows context-dependent attackers to execute arbitrary code via a long value in the third argument object id...