CVE-2002-1426

CVE-2002-1426 affects the HP ProCurve Switch 4000M (firmware version C.07.23). The vulnerability allows remote attackers to cause a denial of service (crash) by sending an SNMP write request containing 85 characters, which may trigger a buffer overflow. The connected documents provide the impact ...

[SECURITY] [DSA 245-1] New dhcp3 packages fix potential network flood

-------------------------------------------------------------------------- Debian Security Advisory DSA 245-1 [email protected] http://www.debian.org/security/ Martin Schulze January 28th, 2003 http://www.debian.org/security/faq -...

DSA-245 dhcp3 - ignored counter boundary

Bulletin has no description...

Allied Telesyn switches & routers vulnerability

Hello, all The problem: Zero stream DoS switch! We have tested switches of Allied Telesyn, 8024 and Rapier24. We have installed the latest firmware from AT site. Testing: 1. Scan for open ports on switch assume switch address 192.168.0.13: nmap -v -sT 192.168.0.13 Starting nmap V. 2.54BETA22...

HP Procurve 4000M Stacked Switch HTTP Reset Vulnerability

Techserve, Inc. www.tech-serve.com Security Advisory Advisory Name: HP Procurve 4000M Stacked Switch HTTP Reset Vulnerability Release Date: 09/23/2002 Platform: HP Procurve 4000M Switch J4121A Application: Firmware revision C.09.13 Current Severity: Multiple reset requests may deny use of stacked...

HP Procurve 4000M Switch - Device Reset Denial of Service

source: https://www.securityfocus.com/bid/5784/info When multiple Procurve switches are used interconnected, it is common for an administrator to enable a feature allowing each switch to be viewed through a single interface, accessible via the web. It has been reported that HP Procurve Switches a...

Enterasys SSR8000 SmartSwitch - Port Scan Denial of Service

Enterasys SSR8000 SmartSwitch - Port Scan Denial of Service source: https://www.securityfocus.com/bid/5703/info The SSR8000 is a SmartSwitch distributed and maintained by Enterasys. It has been discovered that SSR8000 switches react unpredictably when portscanned. When these switches are scanned...

Enterasys SSR8000 SmartSwitch - Port Scan Denial of Service

source: https://www.securityfocus.com/bid/5703/info The SSR8000 is a SmartSwitch distributed and maintained by Enterasys. It has been discovered that SSR8000 switches react unpredictably when portscanned. When these switches are scanned using specific types of TCP traffic, and scanned on certain...

CVE-2002-0870

The original patch for the Cisco Content Service Switch 11000 Series authentication bypass vulnerability CVE-2001-0622 was incomplete, which still allows remote attackers to gain additional privileges by directly requesting the web management URL instead of navigating through the interface,...

CVE-2002-1077

IPSwitch IMail Web Calendaring service iwebcal allows remote attackers to cause a denial of service crash via an HTTP POST request without a Content-Length field...

CVE-2002-0870

Cisco CSS 11000 series WebNS web management service (pre-WebNS 4.01B29s/4.10B17s) is vulnerable to an authentication bypass that lets a remote attacker obtain additional privileges by requesting the web management URL directly, possibly via a variant of the original attack (Cisco bug CSCdw08549)....

CVE-2002-0870

The original patch for the Cisco Content Service Switch 11000 Series authentication bypass vulnerability CVE-2001-0622 was incomplete, which still allows remote attackers to gain additional privileges by directly requesting the web management URL instead of navigating through the interface,...

Cisco Content Service Switch unauthorized access

It's possible to access administrative interface without authentication...

Security Advisory: Cisco Content Service Switch 11000 Series Web Management Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco Content Service Switch 11000 Series Web Management Vulnerability Revision 2.0 For Public Re-release 2002 August 14 at 1500 UTC For Public Release 2001 May 31 at 1500 UTC...

CVE-2002-0792

The web management interface for Cisco Content Service Switch CSS 11000 switches allows remote attackers to cause a denial of service soft reset via 1 an HTTPS POST request, or 2 malformed XML data...

HP ProCurve Switch 4000M - SNMP Write Denial of Service

HP ProCurve Switch 4000M - SNMP Write Denial of Service source: https://www.securityfocus.com/bid/5336/info An issue has been reported with the HP ProCurve 4000M Switch. An attacker with SNMP write access to the device may write to the SNMP variable .iso.3.6.1.4.1.11.2.36.1.1.2.1.0. If more than ...

CVE-2002-0792

The web management interface for Cisco Content Service Switch CSS 11000 switches allows remote attackers to cause a denial of service soft reset via 1 an HTTPS POST request, or 2 malformed XML data...

CVE-2002-0792

The CVE-2002-0792 entry covers the Cisco Content Service Switch (CSS) 11000 series web management interface vulnerability. Reports from NVD and CERT indicate that remote attackers can trigger a denial-of-service by sending either an HTTPS POST request or malformed XML data, causing the device to ...

CVE-2002-0350

HP Procurve Switch 4000M running firmware C.08.22 and C.09.09 allows remote attackers to cause a denial of service via a port scan of the management IP address, which disables the telnet service...

Nortel/Bay Networks Default Password

The remote switch/routers uses the default password. This means that anyone who has downloaded a user manual can telnet to it and gain administrative access. This script was written by Rui Bernardino See the Nessus Scripts License for details Changes by Tenable: - only attempt to login if the...