Mandrake Linux Security Advisory : ucd-snmp (MDKSA-2002:014)

The Oulu University Secure Programming Group OUSPG has identified numerous vulnerabilities in multiple vendor SNMPv1 implementations. These vulnerabilities may allow unauthorized privileged access, denial of service attacks, or unstable behaviour. %NASLMINLEVEL 70300 C Tenable Network Security,...

Mandrake Linux Security Advisory : net-snmp (MDKSA-2003:115)

A vulnerability in Net-SNMP versions prior to 5.0.9 could allow an existing user/community to gain access to data in MIB objects that were explicitly excluded from their view. The updated packages provide Net-SNMP version 5.0.9 which is not vulnerable to this issue and also fixes a number of othe...

CVE-2004-0714

Cisco Internetwork Operating System IOS 12.0S through 12.3T attempts to process SNMP solicited operations on improper ports UDP 162 and a randomly chosen UDP port, which allows remote attackers to cause a denial of service device reload and memory corruption...

Multiple Cisco ONS control cards fail to properly handle malformed SNMP packets

Overview A vulnerability exists in multiple control cards used by Cisco ONS devices. This vulnerability could allow a remote attacker to cause a denial-of-service condition. Description Cisco's Optical Networking product line consists of a series of devices designed to offer high-bandwidth data...

Fedora Core 2 : ethereal-0.10.5-0.2.1 (2004-220)

Issues have been discovered in the following protocol dissectors : - The iSNS dissector could make Ethereal abort in some cases. 0.10.3 - 0.10.4 CVE-2004-0633 - SMB SID snooping could crash if there was no policy name for a handle. 0.9.15 - 0.10.4 CVE-2004-0634 - The SNMP dissector could crash du...

CVE-2004-0714

Cisco IOS SNMP processing in releases 12.0S, 12.1E, 12.2, 12.2S, 12.3, 12.3B, and 12.3T contains a vulnerability in handling SNMP requests that, when exploited remotely, could cause the device to reload and potentially memory corruption. The issue is triggered by solicited SNMP operations on UDP ...

CVE-2004-0714

Cisco Internetwork Operating System IOS 12.0S through 12.3T attempts to process SNMP solicited operations on improper ports UDP 162 and a randomly chosen UDP port, which allows remote attackers to cause a denial of service device reload and memory corruption...

CVE-2004-0714: Undefined Security Weakness

Cisco Internetwork Operating System IOS 12.0S through 12.3T attempts to process SNMP solicited operations on improper ports UDP 162 and a randomly chosen UDP port, which allows remote attackers to cause a denial of service device reload and memory corruption...

Ethereal: Multiple security problems

Background Ethereal is a feature rich network protocol analyzer. Description There are multiple vulnerabilities in versions of Ethereal earlier than 0.10.5, including: In some cases the iSNS dissector could cause Ethereal to abort. If there was no policy name for a handle for SMB SID snooping it...

CVE-2004-0635

The SNMP dissector in Ethereal 0.8.15 through 0.10.4 allows remote attackers to cause a denial of service process crash via a 1 malformed or 2 missing community string, which causes an out-of-bounds read...

CVE-2004-0635

CVE-2004-0635 affects Ethereal 0.8.15–0.10.4, where the SNMP dissector is vulnerable. A remote attacker can trigger a denial of service (process crash) via a malformed or missing community string, causing an out-of-bounds read. The description explicitly ties the issue to the SNMP dissector, the ...

CVE-2004-0635: Undefined Security Weakness

The SNMP dissector in Ethereal 0.8.15 through 0.10.4 allows remote attackers to cause a denial of service process crash via a 1 malformed or 2 missing community string, which causes an out-of-bounds read...

RHEL 3 : net-snmp (RHSA-2004:023)

Updated Net-SNMP packages are available to correct a security vulnerability and other bugs. The Net-SNMP project includes various Simple Network Management Protocol SNMP tools. A security issue in Net-SNMP versions before 5.0.9 could allow an existing user/community to gain access to data in MIB...

CVE-2004-0576

The CVE-2004-0576 issue affects GNU Radius 1.1 when built with the -enable-snmp option. The underlying vulnerability is in the SNMP message handling code, where a malformed SNMP packet containing an invalid OID can cause the radiusd service to crash, enabling remote denial-of-service exploitation...

CVE-2004-0616

The BT Voyager 2000 Wireless ADSL Router has a default public SNMP community name, which allows remote attackers to obtain sensitive information such as the password, which is stored in plaintext...

CVE-2004-0616

The vulnerability CVE-2004-0616 affects the BT Voyager 2000 Wireless ADSL Router, where a default public SNMP community name allows remote attackers to obtain sensitive information (plaintext password). Root cause: default SNMP community name. Impact: confidentiality is partially affected; exploi...

CVE-2004-0576

The radius daemon radiusd for GNU Radius 1.1, when compiled with the -enable-snmp option, allows remote attackers to cause a denial of service server crash via malformed SNMP messages containing an invalid OID...

CVE-2004-0616: Undefined Security Weakness

The BT Voyager 2000 Wireless ADSL Router has a default public SNMP community name, which allows remote attackers to obtain sensitive information such as the password, which is stored in plaintext...

CVE-2004-0576: Undefined Security Weakness

The radius daemon radiusd for GNU Radius 1.1, when compiled with the -enable-snmp option, allows remote attackers to cause a denial of service server crash via malformed SNMP messages containing an invalid OID...

[Full-Disclosure] Wireless Modem (BT Voyager 2000 Wireless ADSL Router cleartext password)

Arhont Ltd. - Information Security Arhont Advisory by: Konstantin Gavrilenko http://www.arhont.com Advisory: cleartext account password obtainable using SNMP Class: design/configuration bug Test platform: BT Voyager 2000 Wireless ADSL Router Vendor Contact Date: 10/06/2004 PD release date:...