CVE-2000-0885

Buffer overflows in Microsoft Network Monitor Netmon allow remote attackers to execute arbitrary commands via a long Browser Name in a CIFS Browse Frame, a long SNMP community name, or a long username or filename in an SMB session, aka the "Netmon Protocol Parsing" vulnerability. NOTE: It is high...

CVE-2000-1058

Buffer overflow in OverView5 CGI program in HP OpenView Network Node Manager NNM 6.1 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, in the SNMP service snmp.exe, aka the "Java SNMP MIB Browser Object ID parsing problem."...

Дырки в устройчтвах VPNet VPN

С помощью source route можно обойти устройство и переслать любой трафик в защищаемую сеть. Кроме того имеются локальные проблемы, возможность атак грубой силы на пароли и стандартный SNMP-community...

Security Bulletin MS00-095

====================================================================== Issue: Wrong permissions on SNMP, RAS, MTS registry keys Date: 06 December 2000 Affected Software: Windows NT 4.0 Impact: Execute code as LocalSystem Bulletin ID: MS00-095 Bulletin:...

Security Bulletin MS00-096

====================================================================== Issue: Wrong permissions on SNMP registry key Date: 06 December 2000 Affected Software: Windows 2000 Impact: Usurp management privileges on SNMP devices Bulletin ID: MS00-096 Bulletin:...

CVE-2000-0955

Cisco Virtual Central Office 4000 VCO/4K uses weak encryption to store usernames and passwords in the SNMP MIB, which allows an attacker who knows the community name to crack the password and gain privileges...

CVE-2000-0885

CVE-2000-0885 covers multiple buffer overflows in Microsoft Network Monitor (Netmon) parsers. The vulnerabilities occur in browser.dll (CIFS Browse Frame), snmp.dll (SNMP community name), and smb.dll (SMB sessions) where unchecked string handling can overflow stacks, enabling remote arbitrary cod...

CVE-2000-0955

CVE-2000-0955 affects Cisco Virtual Central Office 4000 (VCO/4K). The issue is weak encryption used to store usernames and passwords in the SNMP MIB, enabling an attacker who knows the community name to crack credentials and gain privileges. According to the NVD entry, this yields a CVSS v2 base ...

SNMP Request Network Interfaces Enumeration

It is possible to obtain the list of the network interfaces installed on the remote host by sending SNMP requests with the OID 1.3.6.1.2.1.2.1.0 An attacker may use this information to gain more knowledge about the target host. TRUSTED...

SNMP Query Running Process List Disclosure

It is possible to obtain the list of running processes on the remote host by sending SNMP requests with the OID 1.3.6.1.2.1.25.4.2.1.2 An attacker may use this information to gain more knowledge about the target host. TRUSTED...

Microsoft Windows LAN Manager SNMP LanMan Services Disclosure

It is possible to obtain the list of LanMan services on the remote host by sending SNMP requests with the OID 1.3.6.1.4.1.77.1.2.3.1.1 An attacker may use this information to gain more knowledge about the target host. TRUSTED...

Microsoft Windows LAN Manager SNMP LanMan Shares Disclosure

It is possible to obtain the list of LanMan shares on the remote host by sending SNMP requests with the OID 1.3.6.1.4.1.77.1.2.27.1.1. An attacker may use this information to gain more knowledge about the target host. TRUSTED...

Microsoft Windows LAN Manager SNMP LanMan Users Disclosure

It is possible to obtain the list of LanMan users on the remote host by sending SNMP requests with the OID 1.3.6.1.4.1.77.1.2.25.1.1 An attacker may use this information to gain more knowledge about the target host. TRUSTED...

Проблемы с безопасностью в Cisco VCO/4000 (SNMP community)

Через SNMP community доступны на чтение логин и пароль администрирования...

@stake Advisory: Cisco VCO/4000 SNMP Username and Password Retrieval (A102600-1)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 @stake, Inc. www.atstake.com Security Advisory Advisory Name: Cisco VCO/4000 SNMP Username and Password Retrieval Release Date: 10/26/2000 Application: N/A Platform: Cisco Formerly Summa Four VCO/4K software version 5.1.3 and below Severity: An attack...

Cisco Virtual Central Office 4000 (VCO4K) 5.1.3 - Remote Username Password Retrieval

Cisco Virtual Central Office 4000 VCO4K 5.1.3 - Remote Username Password Retrieval source: https://www.securityfocus.com/bid/1885/info A vulnerability exists in the Cisco Virtual Central Office 4000 VCO/4K programmable voice switch running software versions 5.13 and earlier. The usernames and...

Cisco Virtual Central Office 4000 (VCO/4K) 5.1.3 - Remote Username / Password Retrieval

source: https://www.securityfocus.com/bid/1885/info A vulnerability exists in the Cisco Virtual Central Office 4000 VCO/4K programmable voice switch running software versions 5.13 and earlier. The usernames and passwords for the device's SNMP administration interface are protected by a simple...

CVE-2000-0515

The snmpd.conf configuration file for the SNMP daemon snmpd in HP-UX 11.0 is world writable, which allows local users to modify SNMP configuration or gain privileges...

CVE-2000-0515

The CVE-2000-0515 issue affects HP-UX 11.0 where the snmpd.conf configuration file of the SNMP daemon (snmpd) is world-writable. This allows local users to modify SNMP configuration or gain privileges due to the insecure permissions on the config file (world-writable). The provided description do...

DST2K0014: BufferOverrun in HP Openview Network Node Manager v6.1 (Round2)

============================================================================ Delphis Consulting Plc ============================================================================ Security Team Advisories 13/06/2000 [email protected] http://www.delphisplc.com/thinking/whitepapers/...