Проблемы с безопасностью в Cisco VCO/4000 (SNMP community)

Через SNMP community доступны на чтение логин и пароль администрирования...

@stake Advisory: Cisco VCO/4000 SNMP Username and Password Retrieval (A102600-1)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 @stake, Inc. www.atstake.com Security Advisory Advisory Name: Cisco VCO/4000 SNMP Username and Password Retrieval Release Date: 10/26/2000 Application: N/A Platform: Cisco Formerly Summa Four VCO/4K software version 5.1.3 and below Severity: An attack...

Cisco Virtual Central Office 4000 (VCO4K) 5.1.3 - Remote Username Password Retrieval

Cisco Virtual Central Office 4000 VCO4K 5.1.3 - Remote Username Password Retrieval source: https://www.securityfocus.com/bid/1885/info A vulnerability exists in the Cisco Virtual Central Office 4000 VCO/4K programmable voice switch running software versions 5.13 and earlier. The usernames and...

Cisco Virtual Central Office 4000 (VCO/4K) 5.1.3 - Remote Username / Password Retrieval

source: https://www.securityfocus.com/bid/1885/info A vulnerability exists in the Cisco Virtual Central Office 4000 VCO/4K programmable voice switch running software versions 5.13 and earlier. The usernames and passwords for the device's SNMP administration interface are protected by a simple...

CVE-2000-0515

The snmpd.conf configuration file for the SNMP daemon snmpd in HP-UX 11.0 is world writable, which allows local users to modify SNMP configuration or gain privileges...

CVE-2000-0515

The CVE-2000-0515 issue affects HP-UX 11.0 where the snmpd.conf configuration file of the SNMP daemon (snmpd) is world-writable. This allows local users to modify SNMP configuration or gain privileges due to the insecure permissions on the config file (world-writable). The provided description do...

DST2K0014: BufferOverrun in HP Openview Network Node Manager v6.1 (Round2)

============================================================================ Delphis Consulting Plc ============================================================================ Security Team Advisories 13/06/2000 [email protected] http://www.delphisplc.com/thinking/whitepapers/...

HP OpenView Network Node Manager 6.10 - SNMP Denial of Service

HP OpenView Network Node Manager 6.10 - SNMP Denial of Service source: https://www.securityfocus.com/bid/1713/info The OverView5 CGI interface by default is shipped with HP Openview Node Manager. HP Openview Node Manager can be compromised due to an unchecked buffer. By sending a specially crafte...

HP OpenView Network Node Manager 6.10 - SNMP Denial of Service

source: https://www.securityfocus.com/bid/1713/info The OverView5 CGI interface by default is shipped with HP Openview Node Manager. HP Openview Node Manager can be compromised due to an unchecked buffer. By sending a specially crafted GET request comprised of 136 bytes to the web services defaul...

VIGILANTE-2000010.txt

Intel Express Switch series 500 DoS 2 Advisory Code: VIGILANTE-2000010 Release Date: September 6, 2000 Systems Affected: Intel Express Switch 510T - Firmware version 2.63 - Firmware version 2.64 Intel Express Switch 520T - Firmware version 2.63 - Firmware version 2.64 Intel Express Switch 550T -...

CVE-2000-0379

The CVE-2000-0379 entry concerns the Netopia R9100 router, where authenticated users can modify SNMP tables even when the administrator has disabled this capability. According to the NVD entry, the vulnerability has a CVSS base score of 3.6 (LOW) with LOCAL attack vector, low complexity, and no a...

CVE-2000-0379

The Netopia R9100 router does not prevent authenticated users from modifying SNMP tables, even if the administrator has configured it to do so...

Дырка в snmpd под HPUX

Конфигурационный файл открыт на запись...

CVE-2000-0515

The snmpd.conf configuration file for the SNMP daemon snmpd in HP-UX 11.0 is world writable, which allows local users to modify SNMP configuration or gain privileges...

netopia.advisory.r9100

Security Advisory: Netopia R9100 DSL router By: Stephen Friedl [email protected] Date: 8 May 2000 Short summary: The Netopia R9100 permits a user not authorized with a special security password to neverthless modify the SNMP community strings, including enabling SNMP access that should be disable...

CVE-2000-0379

The Netopia R9100 router does not prevent authenticated users from modifying SNMP tables, even if the administrator has configured it to do so...

Netopia R-series Routers 4.6.2 - Modifying SNMP Tables

source: https://www.securityfocus.com/bid/1177/info All R-series platforms with firmware between 4.3.8 and 4.6.2 inclusive allow users who already have access to the router to modify SNMP tables which they should not be able to access. The router has a command-line mode that is reached by typing...

Netopia R-series Routers 4.6.2 - Modifying SNMP Tables

Netopia R-series Routers 4.6.2 - Modifying SNMP Tables source: https://www.securityfocus.com/bid/1177/info All R-series platforms with firmware between 4.3.8 and 4.6.2 inclusive allow users who already have access to the router to modify SNMP tables which they should not be able to access. The...

NetStructure 7180 remote backdoor vulnerability

@Stake Inc. L0pht Research Labs www.atstake.com www.L0pht.com Security Advisory Advisory Name: NetStructure 7180 remote backdoor vulnerability Release Date: May 8th, 2000 Application: Intel NetStructure 7180 previously the Ipivot Commerce Accelerator 8000 Severity: Compromise from a remote networ...

Advisory: Netopia R9100 router vulnerability

Security Advisory: Netopia R9100 DSL router By: Stephen Friedl [email protected] Date: 8 May 2000 Short summary: The Netopia R9100 permits a user not authorized with a special security password to neverthless modify the SNMP community strings, including enabling SNMP access that should be disable...