6554 matches found
Cisco IOS 1112 - SNMP Message Denial of Service
Cisco IOS 1112 - SNMP Message Denial of Service // source: https://www.securityfocus.com/bid/4132/info Cisco products contain multiple vulnerabilities in handling of SNMP requests and traps. A general report for multiple vendors was initially published on February 12 Bugtraq IDs 4088 and 4089,...
FreeBSD-SA-02:11.snmp
-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-02:11 Security Advisory FreeBSD, Inc. Topic: ucd-snmp/net-snmp remotely exploitable vulnerabilities Category: ports Module: net-snmp Announced: 2002-02-12 Credits: OUSPG:...
Cisco IOS 11/12 - SNMP Message Denial of Service
// source: https://www.securityfocus.com/bid/4132/info Cisco products contain multiple vulnerabilities in handling of SNMP requests and traps. A general report for multiple vendors was initially published on February 12 Bugtraq IDs 4088 and 4089, however more information is now available and a...
Malformed SNMP Message-Handling Vulnerabilities for Cisco Non-IOS Products
...
Проблемы с snmp в linksys (information leakage)
После обращения к комьюнити public устройство начинает посылать на запрашивающих хос snmp-trap'ы с отладочной информацией...
Linksys 'routers', SNMP issues
Howdy. LinkSys DSL 'routers' have some serious information leakage, and potention DDoS usage. The following models have been confirmed as having this problem: BEFN2PS4 EtherFast Cable/DSL Router & Voice with 4-Port Switch BEFSR81 EtherFast Cable/DSL Router with 8-Port Switch Querying these device...
Проблемы в SNMP Cisco/Olicom/3Com (ILMI SNMP community)
Неоторые MIB-группы могут быть прочитаны/изменены с исопльзованием недокументированного SNMP-community ILMI и др.. Кроме того, могут "оживать" удаленные community...
Net-SNMP 4.2.3 - snmpnetstat Remote Heap Overflow
Net-SNMP 4.2.3 - snmpnetstat Remote Heap Overflow // source: https://www.securityfocus.com/bid/3780/info Net-SNMP is a package of software tools related to the Simple Network Management Protocol. One of the tools included is snmpnetstat, which can be used to retrieve and display a variety of...
Possible security problem with Cisco ubr900 series routers
Problem: RW access to the MIB, and eventually access to the router config, using ANY yes, ANY community name. The following routers were tested: ubr920, ubr924, ubr925 image file for the ubr925 is as follows: ubr925-k1sv4y556i-mz.121-3a.XL1 snmp-server commands used in each router config, not jus...
Net-SNMP 4.2.3 - snmpnetstat Remote Heap Overflow
// source: https://www.securityfocus.com/bid/3780/info Net-SNMP is a package of software tools related to the Simple Network Management Protocol. One of the tools included is snmpnetstat, which can be used to retrieve and display a variety of information about a remote SNMP host. A heap overflow...
CVE-2001-1210
Cisco ubr900 series routers that conform to the Data-over-Cable Service Interface Specifications DOCSIS standard must ship without SNMP access restrictions, which can allow remote attackers to read and write information to the MIB using arbitrary community strings...
DoS против SNMP в Atmel
После запроса с неправильным SNMP-community перестают приниматься SNMP-запросы...
VIGILANTe advisory 2001003 : Atmel SNMP Non Public Community Stri ng DoS Vulnerability
Atmel SNMP Non Public Community String DoS Vulnerability Advisory Code: VIGILANTE-2001003 Release Date: December 21, 2001 Systems affected: Atmel Firmware 1.3 Tested on a WAP11 Syslink Wireless Access Point WPC11 Wireless network PC card PCMCIA+PCI Under Windows 2000 Systems not affected: Vendor...
CVE-2001-0888
Atmel Firmware 1.3 Wireless Access Point WAP allows remote attackers to cause a denial of service via a SNMP request with 1 a community string other than "public" or 2 an unknown OID, which causes the WAP to deny subsequent SNMP requests...
CVE-2001-1221
D-Link DWL-1000AP Firmware 3.2.28 483 Wireless LAN Access Point uses a default SNMP community string of 'public' which allows remote attackers to gain sensitive information...
CVE-2001-0840
Buffer overflow in Compaq Insight Manager XE 2.1b and earlier allows remote attackers to execute arbitrary code via 1 SNMP and 2 DMI...
CVE-2001-0840
The CVE applies to Compaq Insight Manager XE (version 2.1b and earlier). The vulnerability is a buffer overflow in the product that can be triggered remotely over SNMP or DMI, leading to arbitrary code execution. The root cause is an overflow condition in the handling of SNMP/DMI inputs. Exploita...
Compaq Insight Manager XE buffer overflow in SNMP and DMI functionality
Overview The Compaq web-enabled management software contains a buffer overflow in the SNMP and DMI functionality. Remote intruders may be able to execute arbitrary code with privileges on affected systems. All versions of Compaq Insight Manager XE are affected, but Compaq Insight Manager windows...
Windows NT SNMP agent leaks memory
Overview The Microsoft SNMP agent, prior to Windows NT 4.0 Service Pack 4.0, will leak memory. Description Microsoft's SNMP agent, snmp.exe, priot to Windows NT 4.0 Service Pack 4.0, will leak memory if the OID cannot be decoded. Quoting from Microsoft KB article Q178381, If SNMP cannot decode an...
SNMP Query System Information Disclosure
It is possible to obtain the system information about the remote host by sending SNMP requests with the OID 1.3.6.1.2.1.1.1. An attacker may use this information to gain more knowledge about the target host. TRUSTED...