CVE-2006-6718

The CVE-2006-6718 issue involves the Allied Telesis AT-9000/24 Ethernet switch, where the admin account uses a default password, "manager". This enables remote attackers to perform unauthorized actions. The entry is accompanied by a CVSS v2 base score of 7.5 (HIGH) with network attack vector, no ...

Allied Telesis AT-9000/24 ethernet switche unauthorized access

Administration interface may be accessed from any VLAN...

Allied Telesis AT-9000/24 Ethernet switch management can be accessed from all VLANs.

Overview The AT-9000/24 Ethernet switch's management can be accessed from any VLAN which has been configured to switch. Normally remote management SNMP, telnet, http should be only available from management VLAN and with AT-9000/24 this can't be chosen. Only option for the management VLAN is...

Bait and switch in the image using an administrator account-vulnerability warning-the black bar safety net

Often see some people in the invasion of a Windows 2 0 0 0 or Windows NT after the grandly create an Administrator group of users, it seems that when the administrator is not present generally, today, even contrary to what even the previous of the mind, Share one similar to the RootKit thing, of...

3Com SuperStack 3 switch SNMP information leak

It's possible to get SNMP community string with management packets...

HP ProCurve远程拒绝服务漏洞

HP ProCurve是惠普发布的系列交换机设备。 ProCurve系列交换机实现上存在设计问题，远程攻击者可以通过发送特制报文导致交换机拒绝服务。 HP Procurve Switch 6200yl HP Procurve Switch 5400zl HP Procurve Switch 3500yl HP已经为此发布了一个安全公告（HPSBGN02136）以及相应补丁: HPSBGN02136：SSRT061173 rev.1 - ProCurve Series 3500yl, 6200yl, and 5400zl Switches Running Software Prior to...

CVE-2006-5382

3Com Switch SS3 4400 switches, firmware 5.11, 6.00 and 6.10 and earlier, allow remote attackers to read the SNMP Read-Write Community string and conduct unauthorized actions via unspecified "normally restricted management packets on the device" that cause the community string to be returned...

CVE-2006-5382

3Com Switch SS3 4400 switches, firmware 5.11, 6.00 and 6.10 and earlier, allow remote attackers to read the SNMP Read-Write Community string and conduct unauthorized actions via unspecified "normally restricted management packets on the device" that cause the community string to be returned...

CVE-2006-5382

The CVE-2006-5382 entry affects 3Com Switch SS3 4400 switches, specifically firmware 5.11, 6.00, 6.10 and earlier. Affects remote confidentiality/integrity/availability by allowing remote attackers to read the SNMP Read-Write Community string and perform unauthorized actions via normally restrict...

CVE-2006-5382: Undefined Security Weakness

3Com Switch SS3 4400 switches, firmware 5.11, 6.00 and 6.10 and earlier, allow remote attackers to read the SNMP Read-Write Community string and conduct unauthorized actions via unspecified "normally restricted management packets on the device" that cause the community string to be returned...

CVE-2006-5173

Linux kernel does not properly save or restore EFLAGS during a context switch, or reset the flags when creating new threads, which allows local users to cause a denial of service process crash, as demonstrated using a process that sets the Alignment Check flag EFLAGS 0x40000, which triggers a...

CVE-2006-5173: Undefined Security Weakness

Linux kernel does not properly save or restore EFLAGS during a context switch, or reset the flags when creating new threads, which allows local users to cause a denial of service process crash, as demonstrated using a process that sets the Alignment Check flag EFLAGS 0x40000, which triggers a...

Debian DSA-1070-1 : kernel-source-2.4.19 - several vulnerabilities

Several local and remote vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service or the execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2004-0427 A local denial of service vulnerability i...

Re: Cisco IOS VTP issues

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello, This is a Cisco response to an advisory published by FX of Phenoelit posted as of September 13, 2006 at: http://www.securityfocus.com/archive/1/445896/30/0/threaded and entitled "Cisco Systems IOS VTP multiple vulnerabilities". An official...

CVE-2006-3544

Multiple SQL injection vulnerabilities in Invision Power Board IPB 1.3 Final allow remote attackers to execute arbitrary SQL commands via the CODE parameter in a 1 Stats, 2 Mail, and 3 Reg action in index.php. NOTE: the developer has disputed this issue, stating that "At no point does the CODE...

CentOS 3 : kernel (CESA-2005:294)

Updated kernel packages are now available as part of ongoing support and maintenance of Red Hat Enterprise Linux version 3. This is the fifth regular update. The Linux kernel handles the basic functions of the operating system. This is the fifth regular kernel update to Red Hat Enterprise Linux 3...

IP and MAC bundle cracked-vulnerability warning-the black bar safety net

The principle is as follows: MAC and IP bundling is on the server, then we think the scope of what should be? Of course, also only on the server on the client, but if I modify the Client IP, get on the server? If you have already thought about this, and that it has been the theory of the cracked...

[Full-disclosure] WinSCP - URI Handler Command Switch Parsing

WinSCP - URI Handler Command Switch Parsing About winscp : WinSCP is an open source freeware SFTP client for Windows using SSH. Legacy SCP protocol is also supported. Its main function is safe copying of files between a local and a remote computer. Versions affected : It was tested on WinSCP 3.8....

DEBIAN-CVE-2006-2447

SpamAssassin before 3.1.3, when running with vpopmail and the paranoid -P switch, allows remote attackers to execute arbitrary commands via a crafted message that is not properly handled when invoking spamd with the virtual pop username...

security flaw

SpamAssassin before 3.1.3, when running with vpopmail and the paranoid -P switch, allows remote attackers to execute arbitrary commands via a crafted message that is not properly handled when invoking spamd with the virtual pop username...