CVE-2005-3196

CVE-2005-3196 concerns the Planet Technology Corp FGSW2402RS switch running firmware 1.2, where a default password allows attackers with physical access to the device’s serial port to gain privileges. The affected component is the switch’s firmware authentication mechanism; the root cause is a de...

Cisco Content Services Switch authentication bypass

In case of SSL authentication client can be granted access on SSL reauthentication...

[SA16761] Cisco CSS SSL Authentication Bypass Vulnerability

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

CVE-2001-1570

Technical details about CVE-2001-1570 are not publicly available in the provided connected documents. Monitor for updates.

CVE-2005-2149

config.php in Cacti 0.8.6e and earlier allows remote attackers to set the nohttpheaders switch, then modify session information to gain privileges and disable the use of addslashes to conduct SQL injection attacks...

Bay Networks Accelar 1200 Switch Default Password (password) for 'usrname' Account

The remote device appears to be a Bay Networks Accelar 1200 Switch that can be accessed using default credentials. An attacker could leverage this issue to gain administrative access to the affected device. This password could also be potentially used to gain other sensitive information about the...

Allied Telesyn Router/Switch Web Interface Default Password

The Allied Telesyn Router/Switch has the default password set. The attacker could use this default password to gain remote access to your switch or router. This password could also be potentially used to gain other sensitive information about your network from the device. C Tenable Network...

[SA15393] Cisco Various Products TCP Timestamp Denial of Service

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

kernel security update

CentOS Errata and Security Advisory CESA-2005:294 Updated kernel packages are now available as part of ongoing support and maintenance of Red Hat Enterprise Linux version 3. This is the fifth regular update. The Linux kernel handles the basic functions of the operating system. This is the fifth...

CVE-2004-1792

The CVE-2004-1792 issue affects YaSoft Switch Off (swnet.dll) versions 2.3 and earlier. A crafted long packet containing two CRLF sequences sent to the service management port (TCP 8000) can trigger an infinite loop, causing a denial of service and partial availability impact. Public sources in t...

CVE-2004-1970

CVE-2004-1970 describes a vulnerability in Samsung SmartEther SS6215S switches (and possibly other Samsung switches) where an attacker can gain administrative access by submitting an admin username followed by a password of maximum allowed length, then pressing Enter after the resulting error mes...

CVE-2004-1792

swnet.dll in YaSoft Switch Off 2.3 and earlier allows remote attackers to cause a denial of service infinite loop via a long packet with two CRLF sequences to the service management port TCP 8000...

CVE-2004-1793

Stack-based buffer overflow in swnet.dll in YaSoft Switch Off 2.3 and earlier allows remote authenticated users to execute arbitrary code via a long message parameter in a SendMsg action to action.htm...

CVE-2004-1970

Samsung SmartEther SS6215S switch, and possibly other Samsung switches, allows remote attackers and local users to gain administrative access by providing the admin username followed by a password that is the maximum allowed length, then pressing the enter key after the resulting error message...

CVE-2004-1793

CVE-2004-1793 describes a stack-based buffer overflow in swnet.dll of YaSoft Switch Off (versions 2.3 and earlier). The vulnerability allows remote authenticated users to execute arbitrary code via a long message parameter in a SendMsg action to action.htm. Affected component: swnet.dll within Ya...

CVE-2004-1792: Undefined Security Weakness

swnet.dll in YaSoft Switch Off 2.3 and earlier allows remote attackers to cause a denial of service infinite loop via a long packet with two CRLF sequences to the service management port TCP 8000...

CVE-2004-1793: Undefined Security Weakness

Stack-based buffer overflow in swnet.dll in YaSoft Switch Off 2.3 and earlier allows remote authenticated users to execute arbitrary code via a long message parameter in a SendMsg action to action.htm...

security flaw

Multiple race conditions in the terminal layer in Linux 2.4.x, and 2.6.x before 2.6.9, allow 1 local users to obtain portions of kernel data via a TIOCSETD ioctl call to a terminal interface that is being accessed by another thread, or 2 remote attackers to cause a denial of service panic by...

CVE-2003-1132

The DNS server for Cisco Content Service Switch CSS 11000 and 11500, when prompted for a nonexistent AAAA record, responds with response code 3 NXDOMAIN or "Name Error" instead of response code 0 "No Error", which allows remote attackers to cause a denial of service inaccessible domain by forcing...

CVE-2003-1132: Undefined Security Weakness

The DNS server for Cisco Content Service Switch CSS 11000 and 11500, when prompted for a nonexistent AAAA record, responds with response code 3 NXDOMAIN or "Name Error" instead of response code 0 "No Error", which allows remote attackers to cause a denial of service inaccessible domain by forcing...