EUVD-2008-3793

Malware in sbrugna...

Cisco uBR10012 Series Devices SNMP Vulnerability - Cisco Systems

Cisco uBR10012 series devices automatically enable Simple Network Management Protocol SNMP read/write access to the device if configured for linecard redundancy. This can be exploited by an attacker to gain complete control of the device. Only Cisco uBR10012 series devices that are configured for...

Cisco Security Advisory: Cisco uBR10012 Series Devices SNMP Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco uBR10012 Series Devices SNMP Vulnerability Advisory ID: cisco-sa-20080924-ubr http://www.cisco.com/warp/public/707/cisco-sa-20080924-ubr.shtml Revision 1.0 For Public Release 2008 September 24 1600 UTC GMT -...

CVE-2008-3805

Cisco IOS 12.0 through 12.4 on Cisco 10000, uBR10012 and uBR7200 series devices handles external UDP packets that are sent to 127.0.0.0/8 addresses intended for IPC communication within the device, which allows remote attackers to cause a denial of service device or linecard reload via crafted UD...

CVE-2008-3807

Cisco IOS 12.2 and 12.3 on Cisco uBR10012 series devices, when linecard redundancy is configured, enables a read/write SNMP service with "private" as the community, which allows remote attackers to obtain administrative access by guessing this community and sending SNMP requests...

Code injection

Cisco IOS 12.2 and 12.3 on Cisco uBR10012 series devices, when linecard redundancy is configured, enables a read/write SNMP service with "private" as the community, which allows remote attackers to obtain administrative access by guessing this community and sending SNMP requests...

CVE-2008-3807

Cisco uBR10012 series devices running IOS with linecard redundancy expose SNMP read/write access by default using the community string private, allowing an attacker to gain complete control. The vulnerability stems from SNMP being enabled alongside linecard redundancy without access restrictions....

CVE-2008-3805

CVE-2008-3805 affects Cisco IOS on 10000, uBR10012 and uBR7200 platforms running IOS 12.0–12.4. The vulnerability arises from processing of external UDP IPC packets sent to the 127.0.0.0/8 address space, allowing a remote attacker to cause a denial-of-service (device or linecard reload). The issu...

Cisco uBR10012路由器默认SNMP公共串漏洞

BUGTRAQ ID: 31355 CVE ID: CVE-2008-3807 CNCVE ID：CNCVE-20083807 Cisco uBR10012是一款通用宽带路由器。 Cisco uBR10012路由器存在默认SNMP公共串，远程攻击者可以利用漏洞完全控制此类型设备。 当配置线路卡冗余时Cisco uBR10012系列设备需要与RF交换机通信，这个通信基于SNMP，当线路卡冗余在Cisco uBR10012系列设备上启用时，SNMP也自动启用默认的私有公共串来提供读写权力，由于对这个公共串没有任何访问限制，可导致攻击者完全控制设备。 此Cisco Bug...

Cisco uBR10012 Series Devices SNMP Vulnerability

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...