CVE-1999-0499

CVE-1999-0499 describes exposure of NETBIOS share information in Windows NT by publishing it through SNMP registry keys. Connected sources (Red Hat advisory; Nessus LANMAN disclosures) confirm information disclosure via SNMP OIDs for LanMan services/shares/users, enabling an attacker to learn tar...

CVE-1999-0517

CVE-1999-0517 identifies an SNMP flaw where the community string is default (public), null, or missing. This enables remote SNMP access to the device, with potential exposure of SNMP data and management actions. The vulnerability is reflected across various advisories and scanners (including F5 B...

CVE-1999-0615

CVE-1999-0615 entry is rejected/not used; it does not represent an active vulnerability entry.

CVE-1999-0254

CVE-1999-0254 relates to HP OpenView and describes a hidden SNMP community string vulnerability. A remote attacker could exploit this via SNMP to modify MIB tables and obtain sensitive information, with network access and no authentication required. The NVD entry records a CVSSv2 base score of 10...

CVE-1999-0186

In Solaris, an SNMP subagent has a default community string that allows remote attackers to execute arbitrary commands as root, or modify system parameters...

CVE-1999-0516

CVE-1999-0516 concerns SNMP where the community name is guessable. The provided materials indicate SNMP default/community names (e.g., public) and show Metasploit modules that probe/login using common community strings. The CVSS data in the entry implies network access with low complexity and no ...

EUVD-1999-0498

NETBIOS share information may be published through SNMP registry keys in NT...

CVE-1999-1335

snmpd server in cmu-snmp SNMP package before 3.3-1 in Red Hat Linux 4.0 is configured to allow remote attackers to read and write sensitive information...

CVE-1999-0815

Memory leak in SNMP agent in Windows NT 4.0 before SP5 allows remote attackers to conduct a denial of service memory exhaustion via a large number of queries...

CVE-1999-0294

All records in a WINS database can be deleted through SNMP for a denial of service...

CVE-1999-0294

All records in a WINS database can be deleted through SNMP, causing a denial of service. The connected Red Hat/PT-Security entries confirm the issue but do not provide concrete affected versions or a fix. No remediation details are listed in the provided documents; monitor for updates.

CVE-1999-0472

The CVE-1999-0472 entry describes a vulnerability in NetApps C630 Netcache where the SNMP default community name "public" is not properly removed even if disabled. This can lead to information disclosure (confidentiality impact) per the CVSS v2 base metrics (AV:N/AC:L/Au:N/C:P/I:N/A:N) with a bas...

3com_hub_vuln.txt

Subject: Re: One more 3Com SNMP vulnerability To: [email protected] Hi all, Well spotted. To be more accurate, this bug can be found on 3Com SuperStack II Port Switch Hubs running software version 2.10. The bug disappeared from version 2.12. New software versions are available at...

netcache.snmp.public.txt

Date: Wed, 7 Apr 1999 08:43:40 +0200 From: Marco Davids To: [email protected] Subject: Netcache snmp behaviour Hi, We noticed an unexpected behaviour on our NetApps C630 Netcache's. The problem even seems to exist in the latest software- release 3.3.1. The problem concerns the SNMP default...

xylan.omniswitch.txt

Date: Wed, 31 Mar 1999 19:12:20 +0000 From: [email protected] To: [email protected] Subject: Xylan OmniSwitch "features" Sorry if this is already known. Stepped into two "features" of Xylan OmniSwitches also works on Pizza. These switches are sold OEM to Alcatel which just bought Xylan and IBM...

solaris.snmpd.txt

Date: Mon, 2 Nov 1998 17:47:32 -0500 From: X-Force To: [email protected] Subject: ISS Security Advisory: Hidden community string in SNMP implementation -----BEGIN PGP SIGNED MESSAGE----- ISS Security Advisory November 2nd, 1998 Hidden community string in SNMP implementation Synopsis: Internet...

hp5.txt

Date: Sat, 5 Sep 1998 19:47:29 -0600 From: [email protected] Subject: Another way to crash HP 5M/5N printers In addition to using nestea2 to crash any HP printer, I seem to have found a way to crash certain HP printers with a single perfectly legitimate SNMP packet. The potential impact of this...

sun-snmp.txt

Vulnerabilities in Sun Solaris 2.6 SNMP Jeremy Rauch April 1998 Sun's snmpd implementation as supplied with Solaris 2.6 includes what used to be shipped with Sun's Solstice Admin suite as it's snmpd, and associated subagents. Sun's snmpd is actually pretty interesting, in that it supports a numbe...

hp5crash.txt

http://www.rootshell.com/ Date: Wed, 6 Jan 1999 14:59:21 -0800 From: [email protected] Subject: Another way to crash HP printers A few months ago, I reported that you could crash HP 5m printers by doing a multivarible SNMP query on the interpreters table. I have since found a similar problem tha...

vacm.ucd-snmp.txt

Date: Tue, 6 Apr 1999 03:09:55 -0800 From: + + To: [email protected] Subject: ucd snmp vacm's public community access auth probs? I have found a feature in the vacm ucd-snmp v3.52 and v3.6, when setting up snmp services under Linux RH 5.2. By default, v3.5.2 always delivers the system mib...