Allied Telesis AT-9000/24 ethernet switche unauthorized access

Administration interface may be accessed from any VLAN...

Allied Telesis AT-9000/24 Ethernet switch management can be accessed from all VLANs.

Overview The AT-9000/24 Ethernet switch's management can be accessed from any VLAN which has been configured to switch. Normally remote management SNMP, telnet, http should be only available from management VLAN and with AT-9000/24 this can't be chosen. Only option for the management VLAN is...

[SA22818] 3Com SuperStack 3 Switch 4400 Information Disclosure

TITLE: 3Com SuperStack 3 Switch 4400 Information Disclosure SECUNIA ADVISORY ID: SA22818 VERIFY ADVISORY: http://secunia.com/advisories/22818/ CRITICAL: Less critical IMPACT: Exposure of sensitive information WHERE: From local network OPERATING SYSTEM: 3Com SuperStack 3 Switch 4400 Family...

Cisco IOS contains buffer overflow in VTP VLAN name handling

Overview Cisco IOS fails to properly handle specially crafted VTP summary advertisement with overly long VLAN name. This vulnerability may allow a remote, unauthenticated attacker to execute arbitrary code or cause a denial-of-service condition. Description Cisco's VLAN Trunking Protocol VTP...

Cisco IOS fails to properly verify the VTP configuration revision number

Overview Cisco IOS fails to properly verify the VTP configuration revision number. This vulnerability may allow a remote, unauthenticated attacker to prevent changes to the VLAN database from being properly propagated throughout the VTP domain. Description Cisco's VLAN Trunking Protocol VTP...

CVE-2006-4776

Heap-based buffer overflow in the VLAN Trunking Protocol VTP feature in Cisco IOS 12.119 allows remote attackers to execute arbitrary code via a long VLAN name in a VTP type 2 summary advertisement...

CVE-2006-4776

Heap-based buffer overflow in the VLAN Trunking Protocol VTP feature in Cisco IOS 12.119 allows remote attackers to execute arbitrary code via a long VLAN name in a VTP type 2 summary advertisement...

Re: Cisco IOS VTP issues

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello, This is a Cisco response to an advisory published by FX of Phenoelit posted as of September 13, 2006 at: http://www.securityfocus.com/archive/1/445896/30/0/threaded and entitled "Cisco Systems IOS VTP multiple vulnerabilities". An official...

[email protected], [email protected], [email protected]

Phenoelit Advisory wir-haben-auch-mal-was-gefunden 0815 +---+ Title Cisco Systems IOS VTP multiple vulnerabilities Authors FX [email protected] Phenoelit Group http://www.phenoelit.de Advisory http://www.phenoelit.de/stuff/CiscoVTP.txt Affected Products Cisco IOS and CatOS Tested on: C3550 IOS 12.1...

IP and MAC bundle cracked-vulnerability warning-the black bar safety net

The principle is as follows: MAC and IP bundling is on the server, then we think the scope of what should be? Of course, also only on the server on the client, but if I modify the Client IP, get on the server? If you have already thought about this, and that it has been the theory of the cracked...

CVE-2005-4714

CVE-2005-4714 : Concrete details exist in Connected documents. OpenVMPS (VLAN Management Policy Server) up to version 1.3 has a format string vulnerability in the vmps_log function. This allows remote attackers to execute arbitrary code on the affected host (impact described as possible code exec...

CVE-2005-4714

Format string vulnerability in the vmpslog function in OpenVMPS VLAN Management Policy Server 1.3 allows remote attackers to execute arbitrary code via unknown vectors...

CVE-2005-4440

The 802.1q VLAN protocol allows remote attackers to bypass network segmentation and spoof VLAN traffic via a message with two 802.1q tags, which causes the second tag to be redirected from a downstream switch after the first tag has been stripped, as demonstrated by Yersinia, aka "double-tagging...

CVE-2005-4440

The CVE describes a vulnerability in the 802.1q VLAN protocol where a crafted frame containing two 802.1q tags can cause the second tag to be redirected after the first is stripped, enabling a remote attacker to bypass network segmentation and spoof VLANs. Demonstrated by the tool Yersinia (doubl...

CVE-2005-4440

The 802.1q VLAN protocol allows remote attackers to bypass network segmentation and spoof VLAN traffic via a message with two 802.1q tags, which causes the second tag to be redirected from a downstream switch after the first tag has been stripped, as demonstrated by Yersinia, aka "double-tagging...

VLAN Membership Policy Server Detection

The remote host is running a VLAN Management Policy Server VMPS, which is used for assigning switch ports to specific VLANs based on the MAC address of connecting device. C Tenable Network Security include"compat.inc"; if description scriptid20066; scriptversion"1.9"; scriptcvsdate"Date:...

Denial and then when the“script kids”to become a real hacker! - Vulnerability warning-the black bar safety net

On hack how to make online with the n version. But mostly grandstanding. Look at this now, is I online can see the detailed tutorial. I believe you will certainly have the benefits. Transferred from: tsinghua bbs Basis: How to learn ·To have learning objectives ·Have a learning plan ·To have the...

CVE-2005-2548

vlandev.c in the VLAN code for Linux kernel 2.6.8 allows remote attackers to cause a denial of service kernel oops from null dereference via certain UDP packets that lead to a function call with the wrong argument, as demonstrated using snmpwalk on snmpd...

CVE-2005-2548

vlandev.c in the VLAN code for Linux kernel 2.6.8 allows remote attackers to cause a denial of service kernel oops from null dereference via certain UDP packets that lead to a function call with the wrong argument, as demonstrated using snmpwalk on snmpd...

CVE-2005-2548

vlandev.c in the VLAN code for Linux kernel 2.6.8 allows remote attackers to cause a denial of service kernel oops from null dereference via certain UDP packets that lead to a function call with the wrong argument, as demonstrated using snmpwalk on snmpd...