6489 matches found
Security Bulletin MS00-096
====================================================================== Issue: Wrong permissions on SNMP registry key Date: 06 December 2000 Affected Software: Windows 2000 Impact: Usurp management privileges on SNMP devices Bulletin ID: MS00-096 Bulletin:...
Дырки в устройчтвах VPNet VPN
С помощью source route можно обойти устройство и переслать любой трафик в защищаемую сеть. Кроме того имеются локальные проблемы, возможность атак грубой силы на пароли и стандартный SNMP-community...
CVE-2000-0955
CVE-2000-0955 affects Cisco Virtual Central Office 4000 (VCO/4K). The issue is weak encryption used to store usernames and passwords in the SNMP MIB, enabling an attacker who knows the community name to crack credentials and gain privileges. According to the NVD entry, this yields a CVSS v2 base ...
CVE-2000-0885
CVE-2000-0885 covers multiple buffer overflows in Microsoft Network Monitor (Netmon) parsers. The vulnerabilities occur in browser.dll (CIFS Browse Frame), snmp.dll (SNMP community name), and smb.dll (SMB sessions) where unchecked string handling can overflow stacks, enabling remote arbitrary cod...
CVE-2000-0955
Cisco Virtual Central Office 4000 VCO/4K uses weak encryption to store usernames and passwords in the SNMP MIB, which allows an attacker who knows the community name to crack the password and gain privileges...
SNMP Query Running Process List Disclosure
It is possible to obtain the list of running processes on the remote host by sending SNMP requests with the OID 1.3.6.1.2.1.25.4.2.1.2 An attacker may use this information to gain more knowledge about the target host. TRUSTED...
SNMP Request Network Interfaces Enumeration
It is possible to obtain the list of the network interfaces installed on the remote host by sending SNMP requests with the OID 1.3.6.1.2.1.2.1.0 An attacker may use this information to gain more knowledge about the target host. TRUSTED...
Microsoft Windows LAN Manager SNMP LanMan Services Disclosure
It is possible to obtain the list of LanMan services on the remote host by sending SNMP requests with the OID 1.3.6.1.4.1.77.1.2.3.1.1 An attacker may use this information to gain more knowledge about the target host. TRUSTED...
Microsoft Windows LAN Manager SNMP LanMan Users Disclosure
It is possible to obtain the list of LanMan users on the remote host by sending SNMP requests with the OID 1.3.6.1.4.1.77.1.2.25.1.1 An attacker may use this information to gain more knowledge about the target host. TRUSTED...
Microsoft Windows LAN Manager SNMP LanMan Shares Disclosure
It is possible to obtain the list of LanMan shares on the remote host by sending SNMP requests with the OID 1.3.6.1.4.1.77.1.2.27.1.1. An attacker may use this information to gain more knowledge about the target host. TRUSTED...
@stake Advisory: Cisco VCO/4000 SNMP Username and Password Retrieval (A102600-1)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 @stake, Inc. www.atstake.com Security Advisory Advisory Name: Cisco VCO/4000 SNMP Username and Password Retrieval Release Date: 10/26/2000 Application: N/A Platform: Cisco Formerly Summa Four VCO/4K software version 5.1.3 and below Severity: An attack...
Проблемы с безопасностью в Cisco VCO/4000 (SNMP community)
Через SNMP community доступны на чтение логин и пароль администрирования...
Cisco Virtual Central Office 4000 (VCO4K) 5.1.3 - Remote Username Password Retrieval
Cisco Virtual Central Office 4000 VCO4K 5.1.3 - Remote Username Password Retrieval source: https://www.securityfocus.com/bid/1885/info A vulnerability exists in the Cisco Virtual Central Office 4000 VCO/4K programmable voice switch running software versions 5.13 and earlier. The usernames and...
Cisco Virtual Central Office 4000 (VCO/4K) 5.1.3 - Remote Username / Password Retrieval
source: https://www.securityfocus.com/bid/1885/info A vulnerability exists in the Cisco Virtual Central Office 4000 VCO/4K programmable voice switch running software versions 5.13 and earlier. The usernames and passwords for the device's SNMP administration interface are protected by a simple...
CVE-2000-0515
The snmpd.conf configuration file for the SNMP daemon snmpd in HP-UX 11.0 is world writable, which allows local users to modify SNMP configuration or gain privileges...
CVE-2000-0515
The CVE-2000-0515 issue affects HP-UX 11.0 where the snmpd.conf configuration file of the SNMP daemon (snmpd) is world-writable. This allows local users to modify SNMP configuration or gain privileges due to the insecure permissions on the config file (world-writable). The provided description do...
DST2K0014: BufferOverrun in HP Openview Network Node Manager v6.1 (Round2)
============================================================================ Delphis Consulting Plc ============================================================================ Security Team Advisories 13/06/2000 [email protected] http://www.delphisplc.com/thinking/whitepapers/...
HP OpenView Network Node Manager 6.10 - SNMP Denial of Service
HP OpenView Network Node Manager 6.10 - SNMP Denial of Service source: https://www.securityfocus.com/bid/1713/info The OverView5 CGI interface by default is shipped with HP Openview Node Manager. HP Openview Node Manager can be compromised due to an unchecked buffer. By sending a specially crafte...
HP OpenView Network Node Manager 6.10 - SNMP Denial of Service
source: https://www.securityfocus.com/bid/1713/info The OverView5 CGI interface by default is shipped with HP Openview Node Manager. HP Openview Node Manager can be compromised due to an unchecked buffer. By sending a specially crafted GET request comprised of 136 bytes to the web services defaul...
VIGILANTE-2000010.txt
Intel Express Switch series 500 DoS 2 Advisory Code: VIGILANTE-2000010 Release Date: September 6, 2000 Systems Affected: Intel Express Switch 510T - Firmware version 2.63 - Firmware version 2.64 Intel Express Switch 520T - Firmware version 2.63 - Firmware version 2.64 Intel Express Switch 550T -...