CVE-2004-1792

swnet.dll in YaSoft Switch Off 2.3 and earlier allows remote attackers to cause a denial of service infinite loop via a long packet with two CRLF sequences to the service management port TCP 8000...

CVE-2004-1793

CVE-2004-1793 describes a stack-based buffer overflow in swnet.dll of YaSoft Switch Off (versions 2.3 and earlier). The vulnerability allows remote authenticated users to execute arbitrary code via a long message parameter in a SendMsg action to action.htm. Affected component: swnet.dll within Ya...

CVE-2004-1792

The CVE-2004-1792 issue affects YaSoft Switch Off (swnet.dll) versions 2.3 and earlier. A crafted long packet containing two CRLF sequences sent to the service management port (TCP 8000) can trigger an infinite loop, causing a denial of service and partial availability impact. Public sources in t...

CVE-2004-1970

Samsung SmartEther SS6215S switch, and possibly other Samsung switches, allows remote attackers and local users to gain administrative access by providing the admin username followed by a password that is the maximum allowed length, then pressing the enter key after the resulting error message...

CVE-2004-1793

Stack-based buffer overflow in swnet.dll in YaSoft Switch Off 2.3 and earlier allows remote authenticated users to execute arbitrary code via a long message parameter in a SendMsg action to action.htm...

security flaw

Multiple race conditions in the terminal layer in Linux 2.4.x, and 2.6.x before 2.6.9, allow 1 local users to obtain portions of kernel data via a TIOCSETD ioctl call to a terminal interface that is being accessed by another thread, or 2 remote attackers to cause a denial of service panic by...

CVE-2003-1132

The DNS server for Cisco Content Service Switch CSS 11000 and 11500, when prompted for a nonexistent AAAA record, responds with response code 3 NXDOMAIN or "Name Error" instead of response code 0 "No Error", which allows remote attackers to cause a denial of service inaccessible domain by forcing...

Avaya P330 Stackable Switch Default Password

The remote host appears to be an Avaya P330 Stackable Switch with its default password set. An attacker could use this default password to gain remote access to the affected switch. This password could also be potentially used to gain other sensitive information about the remote network from the...

CVE-2004-1793

Stack-based buffer overflow in swnet.dll in YaSoft Switch Off 2.3 and earlier allows remote authenticated users to execute arbitrary code via a long message parameter in a SendMsg action to action.htm...

CVE-2004-2502

im-switch before 11.4-46.1 in Fedora Core 2 allows local users to overwrite arbitrary files via a symlink attack on the imswitcherPID temporary file...

CVE-2004-1792

swnet.dll in YaSoft Switch Off 2.3 and earlier allows remote attackers to cause a denial of service infinite loop via a long packet with two CRLF sequences to the service management port TCP 8000...

Netcat v1.1 "-e" Switch Remote Buffer Overflow Exploit

Exploit for unknown platform in category remote exploits ====================================================== Netcat v1.1 "-e" Switch Remote Buffer Overflow Exploit ====================================================== / Netcat v1.1, "-e" Switch, Remote Buffer Overflow Exploit v0.1...

Netcat 1.1 - '-e' Switch Remote Buffer Overflow

/ Netcat v1.1, "-e" Switch, Remote Buffer Overflow Exploit v0.1 Homepage..........: http://www.securityfocus.com/tools/139/scoreit Affected versions.: v1.1 Fix...............: Actually none, Hobbit is warned 1 month+ ago, and looks like to not act, we let him to spread a backdoor :...

security flaw

Floating point information leak in the context switch code for Linux 2.4.x only checks the MFH bit but does not verify the FPH owner, which allows local users to read register values of other processes by setting the MFH bit...

Asante FM2008 10/100 Ethernet switch backdoor login

The Asante FM2008 is an 8 port managed Ethernet 10/100 switch. It may be managed, like many others in its device class, by Telnet, by serial port, by HTTP, or by SNMP. Also like most similar devices, the serial port, HTTP, and Telnet access methods require one to provide username/password...

CVE-2004-0565

Floating point information leak in the context switch code for Linux 2.4.x only checks the MFH bit but does not verify the FPH owner, which allows local users to read register values of other processes by setting the MFH bit...

CVE-2004-0244

Cisco 6000, 6500, and 7600 series systems with Multilayer Switch Feature Card 2 MSFC2 and a FlexWAN or OSM module allow local users to cause a denial of service hang or reset by sending a layer 2 frame packet that encapsulates a layer 3 packet, but has inconsistent length values with that packet...

CVE-2002-1147

HP Procurve 4000M Switch firmware prior to C.09.16 is affected by CVE-2002-1147. The HTTP management interface does not authenticate reset requests to the device_reset CGI, enabling a remote denial-of-service via a direct request. The issue is network-exposed and stems from unauthenticated reset ...

CVE-2002-1147

The HTTP administration interface for HP Procurve 4000M Switch firmware before C.09.16, with stacking features and remote administration enabled, does not authenticate requests to reset the device, which allows remote attackers to cause a denial of service via a direct request to the devicereset...

Critical: Red Hat Security Advisory: Netscape security update

Netscape Navigator and Netscape Communicator 4.8 as distributed with Red Hat Enterprise Linux 2.1 contain security flaws and should not be used. Netscape Navigator and Netscape Communicator have been removed from the Red Hat Enterprise Linux 2.1 CD-ROM distribution as part of Update 5. These...