jetlib.sec » Tags » snmp

Feeds

133445 items (0 unread) in 27 feeds

• 1337day (was: Inj3ct0r, 1337db)
• OSVDB Vulnerabilities
• Exploit-DB
• SecurityFocus Vulnerabilities
• Bugtraq
• Full Disclosure
• XSSed
• Packet Storm Security Headlines
• Packet Storm Security Advisories
• Packet Storm Security Exploits
• Packet Storm Security Recent Files
• Packet Storm Security Tools
• Packet Storm Security Misc. Files
• Sophos security news
• Sophos product advisories
• Penetration Testing
• SecuriTeam
• BackTrack Linux Forums
• Threatpost
• SecDocs
• carnal0wnage.attackresearch.com
• Carnal0wnage
• Kernel Fun
• Darknet
• The Exploitant
• Hack a Day
• Wirevolution

35 items tagged "snmp"

Related tags: cisco ios [+], remote [+], wireshark [+], vulnerability [+], sunway [+], snmp v1 [+], opcode [+], malformed [+], denial [+], user [+], temporary file [+], stack [+], snmp protocol [+], service [+], series switches [+], mandriva linux [+], linux security [+], hplip [+], forcecontrol [+], cisco security advisory [+], cisco security [+], cisco industrial [+], based buffer overflow [+], usn [+], request [+], message [+], management [+], insight management [+], information disclosure vulnerability [+], free software updates [+], fence [+], cisco routers [+], authentication [+], apc [+], advisory [+], Software [+], tcp wrappers [+], switches [+], suspected [+], spam [+], snmp vulnerability [+], snmp server [+], snmp agents [+], smb shares [+], server [+], security advisory [+], security [+], secunia [+], scanner [+], safer use [+], rhosts [+], retired [+], read [+], procurve [+], processing [+], net [+], management agents [+], insight [+], insecure [+], info hardware [+], industrial ethernet [+], hp snmp [+], hp procurve [+], hmanics [+], getbulk [+], fixproc [+], exploits [+], exploit [+], esx [+], disclosure of information [+], creation vulnerability [+], console [+], coded [+], cisco config [+], service vulnerability [+], denial of service [+]

• May 23, 2012
• 0:00

  Vuln: Net-SNMP SNMP GET Request Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Net-SNMP SNMP GET Request Denial of Service Vulnerability

  Tags:  request denial snmp service-vulnerability denial-of-service  

• May 15, 2012
• 0:00

  Vuln: Net-SNMP SNMP GET Request Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Net-SNMP SNMP GET Request Denial of Service Vulnerability

  Tags:  request denial snmp service-vulnerability denial-of-service  

• February 02, 2012
• 18:35

  Sunway Forcecontrol SNMP NetDBServer.exe Opcode 0x57

   » ‎ Packet Storm Security Exploits
  This Metasploit module exploits a stack based buffer overflow found in the SNMP NetDBServer service of Sunway Forcecontrol

  Tags:  forcecontrol sunway snmp based-buffer-overflow opcode stack  

• 18:35

  Sunway Forcecontrol SNMP NetDBServer.exe Opcode 0x57

   » ‎ Packet Storm Security Recent Files
  This Metasploit module exploits a stack based buffer overflow found in the SNMP NetDBServer service of Sunway Forcecontrol

  Tags:  forcecontrol sunway snmp based-buffer-overflow opcode stack  

• 18:35

  Sunway Forcecontrol SNMP NetDBServer.exe Opcode 0x57

   » ‎ Packet Storm Security Misc. Files
  This Metasploit module exploits a stack based buffer overflow found in the SNMP NetDBServer service of Sunway Forcecontrol

  Tags:  forcecontrol sunway snmp based-buffer-overflow opcode stack  

• 14:00

  [remote exploits] - Sunway Forcecontrol SNMP NetDBServer.exe Opcode 0x57

   » ‎ 1337day (was: Inj3ct0r, 1337db)
  [remote exploits] - Sunway Forcecontrol SNMP NetDBServer.exe Opcode 0x57

  Tags:  exploit sunway remote opcode snmp exploits  

• August 17, 2011
• 3:51

  Secunia Security Advisory 45609

   » ‎ Packet Storm Security Advisories
  Secunia Security Advisory - Oracle has acknowledged a vulnerability in Net-snmp included in Solaris, which can be exploited by malicious, local users to perform certain actions on a vulnerable system with escalated privileges.

  Tags:  advisory secunia security security-advisory snmp  

• 0:00

  Vuln: Net-SNMP Fixproc Insecure Temporary File Creation Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Net-SNMP Fixproc Insecure Temporary File Creation Vulnerability

  Tags:  insecure fixproc snmp creation-vulnerability temporary-file  

• June 20, 2011
• 0:00

  Vuln: RETIRED: Cisco IOS SNMP Message Processing Remote Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  RETIRED: Cisco IOS SNMP Message Processing Remote Denial of Service Vulnerability

  Tags:  message retired snmp cisco-ios service-vulnerability denial-of-service  

• May 23, 2011
• 0:00

  Vuln: HP SNMP Agents and Insight Management Agents Multiple Unspecified Security Vulnerabilities

   » ‎ SecurityFocus Vulnerabilities
  HP SNMP Agents and Insight Management Agents Multiple Unspecified Security Vulnerabilities

  Tags:  insight management snmp hp-snmp snmp-agents insight-management  

• 0:00

  Vuln: HP Insight Management Agents 'hmanics.snmp.php' Full Path Information Disclosure Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  HP Insight Management Agents 'hmanics.snmp.php' Full Path Information Disclosure Vulnerability

  Tags:  management hmanics snmp information-disclosure-vulnerability insight-management management-agents  

• May 04, 2011
• 15:22

  Cisco IOS 15.0 SNMP Message Processing Denial Of Service

   » ‎ Packet Storm Security Advisories
  Cisco routers running IOS version 15.0 suffer from a SNMP related denial of service vulnerability.

  Tags:  denial service snmp cisco-ios service-vulnerability cisco-routers  

• 15:22

  Cisco IOS 15.0 SNMP Message Processing Denial Of Service

   » ‎ Packet Storm Security Recent Files
  Cisco routers running IOS version 15.0 suffer from a SNMP related denial of service vulnerability.

  Tags:  denial service snmp cisco-ios service-vulnerability cisco-routers  

• 12:00

  Bugtraq: Cisco IOS SNMP Message Processing Denial Of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Cisco IOS SNMP Message Processing Denial Of Service Vulnerability

  Tags:  message processing snmp cisco-ios service-vulnerability denial-of-service  

• April 19, 2011
• 0:00

  Vuln: Wireshark Malformed SNMP V1 Packet Remote Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Wireshark Malformed SNMP V1 Packet Remote Denial of Service Vulnerability

  Tags:  wireshark malformed snmp snmp-v1 service-vulnerability denial-of-service  

• March 23, 2011
• 13:27

  New SNMP Metasploit Modules

   » ‎ Carnal0wnage
  my new favorite modules (for today) are the snmp_enumusers and snmp_enumshares modules that work against windows hosts that have snmp running.
  
  msf > use auxiliary/scanner/snmp/
  use auxiliary/scanner/snmp/aix_version
  use auxiliary/scanner/snmp/snmp_enumshares
  use auxiliary/scanner/snmp/cisco_config_tftp
  use auxiliary/scanner/snmp/snmp_enumusers
  use auxiliary/scanner/snmp/cisco_upload_file
  use auxiliary/scanner/snmp/snmp_login
  use auxiliary/scanner/snmp/snmp_enum
  use auxiliary/scanner/snmp/snmp_set
  
  msf > use auxiliary/scanner/snmp/snmp_login
  msf auxiliary(snmp_login) > set RHOSTS 192.168.100.119
  RHOSTS => 192.168.100.119
  msf auxiliary(snmp_login) > run
  
  [+] SNMP: 192.168.100.119 community string: 'public' info: 'Hardware: x86 Family 6 Model 23 Stepping 6 AT/AT COMPATIBLE - Software: Windows Version 5.2 (Build 3790 Multiprocessor Free)'
  [+] SNMP: 192.168.100.119 community string: 'private' info: 'Hardware: x86 Family 6 Model 23 Stepping 6 AT/AT COMPATIBLE - Software: Windows Version 5.2 (Build 3790 Multiprocessor Free)'
  [*] Validating scan results from 1 hosts...
  [*] Host 192.168.100.119 provides READ-WRITE access with community 'private'
  [*] Scanned 1 of 1 hosts (100% complete)
  [*] Auxiliary module execution completed
  
  msf auxiliary(snmp_login) > use auxiliary/scanner/snmp/snmp_enumusers
  msf auxiliary(snmp_enumusers) > info
  ...SNIP...
  Description:
  This module will use LanManager OID values to enumerate local user accounts on a Windows system via SNMP
  
  msf auxiliary(snmp_enumusers) > set RHOSTS 192.168.100.119
  RHOSTS => 192.168.100.119
  msf auxiliary(snmp_enumusers) > run
  
  [+] 192.168.100.119 Found Users: ASPNET, Administrator, Guest, IUSR_SRV, IWAM_SRV, SUPPORT_388945a0
  [*] Scanned 1 of 1 hosts (100% complete)
  [*] Auxiliary module execution completed
  
  msf auxiliary(snmp_enumusers) > use auxiliary/scanner/snmp/snmp_enumshares
  msf auxiliary(snmp_enumshares) > info
  ...SNIP...
  Description:
  This module will use LanManager OID values to enumerate SMB shares on a Windows system via SNMP
  
  msf auxiliary(snmp_enumshares) > set RHOSTS 192.168.100.119
  RHOSTS => 192.168.100.119
  msf auxiliary(snmp_enumshares) > run
  
  [+] 192.168.100.119
  backup - (C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\backup)
  MetaInfoBack - (C:\WINDOWS\system32\inetsrv\MetaInfoBack)
  NewBackup2 - (J:\NewBackup2)
  SharepointBackup - (K:\SharepointBackup)
  [*] Scanned 1 of 1 hosts (100% complete)
  [*] Auxiliary module execution completed

  Tags:  scanner rhosts snmp read cisco-config info-hardware smb-shares  

• March 09, 2011
• 0:00

  Vuln: Wireshark Malformed SNMP V1 Packet Remote Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Wireshark Malformed SNMP V1 Packet Remote Denial of Service Vulnerability

  Tags:  wireshark malformed snmp snmp-v1 service-vulnerability denial-of-service  

• February 17, 2011
• 0:00

  Vuln: fence 'fence_apc' and 'fence_apc_snmp' Insecure Temporary File Creation Vulnerabilities

   » ‎ SecurityFocus Vulnerabilities
  fence 'fence_apc' and 'fence_apc_snmp' Insecure Temporary File Creation Vulnerabilities

  Tags:  apc fence snmp temporary-file  

• February 16, 2011
• 0:00

  Vuln: Wireshark Malformed SNMP V1 Packet Remote Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Wireshark Malformed SNMP V1 Packet Remote Denial of Service Vulnerability

  Tags:  wireshark malformed snmp snmp-v1 service-vulnerability denial-of-service  

• January 19, 2011
• 16:53

  Mandriva Linux Security Advisory 2011-013

   » ‎ Packet Storm Security Advisories
  Mandriva Linux Security Advisory 2011-013 - A flaw was found in the way certain HPLIP tools discovered devices using the SNMP protocol. If a user ran certain HPLIP tools that search for supported devices using SNMP, and a malicious user is able to send specially-crafted SNMP responses, it could cause those HPLIP tools to crash or, possibly, execute arbitrary code with the privileges of the user running them.

  Tags:  user hplip snmp mandriva-linux snmp-protocol linux-security  

• 16:53

  Mandriva Linux Security Advisory 2011-013

   » ‎ Packet Storm Security Recent Files
  Mandriva Linux Security Advisory 2011-013 - A flaw was found in the way certain HPLIP tools discovered devices using the SNMP protocol. If a user ran certain HPLIP tools that search for supported devices using SNMP, and a malicious user is able to send specially-crafted SNMP responses, it could cause those HPLIP tools to crash or, possibly, execute arbitrary code with the privileges of the user running them.

  Tags:  user hplip snmp mandriva-linux snmp-protocol linux-security  

• 16:53

  Mandriva Linux Security Advisory 2011-013

   » ‎ Packet Storm Security Misc. Files
  Mandriva Linux Security Advisory 2011-013 - A flaw was found in the way certain HPLIP tools discovered devices using the SNMP protocol. If a user ran certain HPLIP tools that search for supported devices using SNMP, and a malicious user is able to send specially-crafted SNMP responses, it could cause those HPLIP tools to crash or, possibly, execute arbitrary code with the privileges of the user running them.

  Tags:  user hplip snmp mandriva-linux snmp-protocol linux-security  

• December 16, 2010
• 0:00

  Vuln: Net-SNMP GETBULK Remote Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Net-SNMP GETBULK Remote Denial of Service Vulnerability

  Tags:  getbulk remote snmp service-vulnerability denial-of-service  

• November 29, 2010
• 0:00

  Vuln: Wireshark Malformed SNMP V1 Packet Remote Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Wireshark Malformed SNMP V1 Packet Remote Denial of Service Vulnerability

  Tags:  wireshark malformed snmp snmp-v1 service-vulnerability denial-of-service  

• October 23, 2010
• 22:10

  HP ProCurve 1800 Switches running SNMP Disclosure of Information Vulnerability

   » ‎ SecuriTeam
  A vulnerability related to the disclosure of information was discovered in HP ProCurve 1800 Switches Running SNMP.

  -

  Make your website safer. Use external penetration testing service. First report ready in one hour!

  Tags:  switches snmp procurve hp-procurve disclosure-of-information safer-use  

• September 29, 2010
• 0:00

  Vuln: fence 'fence_apc' and 'fence_apc_snmp' Insecure Temporary File Creation Vulnerabilities

   » ‎ SecurityFocus Vulnerabilities
  fence 'fence_apc' and 'fence_apc_snmp' Insecure Temporary File Creation Vulnerabilities

  Tags:  apc fence snmp temporary-file  

• August 09, 2010
• 0:00

  Vuln: Net-SNMP Remote Authentication Bypass Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Net-SNMP Remote Authentication Bypass Vulnerability

  Tags:  authentication remote snmp vulnerability  

• July 07, 2010
• 23:03

  cisco-sa-20100707-snmp.txt

   » ‎ Packet Storm Security Recent Files
  Cisco Security Advisory - Cisco Industrial Ethernet 3000 (IE 3000) Series switches running Cisco IOS Software releases 12.2(52)SE or 12.2(52)SE1, contain a vulnerability where well known SNMP community names are hard-coded for both read and write access. The hard-coded community names are public and private. Cisco recommends that all administrators deploy the mitigation measures outlined in the Workarounds section or perform a Cisco IOS Software upgrade. Cisco has released free software updates that address this vulnerability.

  Tags:  vulnerability Software snmp cisco-ios cisco-security cisco-industrial cisco-security-advisory free-software-updates series-switches  

• 23:02

  cisco-sa-20100707-snmp.txt

   » ‎ Packet Storm Security Advisories
  Cisco Security Advisory - Cisco Industrial Ethernet 3000 (IE 3000) Series switches running Cisco IOS Software releases 12.2(52)SE or 12.2(52)SE1, contain a vulnerability where well known SNMP community names are hard-coded for both read and write access. The hard-coded community names are public and private. Cisco recommends that all administrators deploy the mitigation measures outlined in the Workarounds section or perform a Cisco IOS Software upgrade. Cisco has released free software updates that address this vulnerability.

  Tags:  vulnerability Software snmp cisco-ios cisco-security cisco-industrial cisco-security-advisory free-software-updates series-switches  

• 13:01

  Bugtraq: Cisco Security Advisory: Hard-Coded SNMP Community Names in Cisco Industrial Ethernet 3000 Series Switches Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Cisco Security Advisory: Hard-Coded SNMP Community Names in Cisco Industrial Ethernet 3000 Series Switches Vulnerability

  Tags:  advisory coded snmp cisco-security cisco-industrial cisco-security-advisory series-switches industrial-ethernet  

• June 23, 2010
• 0:00

  Vuln: Net-SNMP Remote Authentication Bypass Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Net-SNMP Remote Authentication Bypass Vulnerability

  Tags:  authentication remote snmp vulnerability  

• June 02, 2010
• 22:00

  USN-946-1.txt

   » ‎ Packet Storm Security Recent Files
  Ubuntu Security Notice 946-1 - The SNMP server did not correctly validate certain UDP clients when using TCP wrappers. Under some situations, a remote attacker could bypass access restrictions and communicate with the SNMP server, potentially leading to a loss of privacy or a denial of service.

  Tags:  server snmp usn snmp-server denial-of-service tcp-wrappers  

• 14:00

  Bugtraq: [Suspected Spam][USN-946-1] Net-SNMP vulnerability

   » ‎ SecurityFocus Vulnerabilities
  [Suspected Spam][USN-946-1] Net-SNMP vulnerability

  Tags:  spam suspected snmp snmp-vulnerability usn  

• 0:00

  Vuln: Net-SNMP 'snmpUDPDomain.c' Remote Information Disclosure Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Net-SNMP 'snmpUDPDomain.c' Remote Information Disclosure Vulnerability

  Tags:  net remote snmp information-disclosure-vulnerability  

• February 16, 2010
• 14:00

  Bugtraq: VMSA-2010-0003 ESX Service Console update for net-snmp

   » ‎ SecurityFocus Vulnerabilities
  VMSA-2010-0003 ESX Service Console update for net-snmp

  Tags:  console esx service snmp