Further Categories

Cisco Products:

Further Information

ESB-2005.0070 -- iDEFENSE Security Advisory 01.20.05 -- 3Com OfficeConnect Wireless 11g AP Information Disclosure Vulnerability - Remote exploitation of an input validation vulnerability in 3Com Corp.'s OfficeConnect Wireless 11g Access Point allows attackers to glean sensitive router information. (21/01/2005)

ESB-2005.0064 -- Cisco Security Advisory -- Vulnerability in Cisco IOS Embedded Call Processing Solutions - (20/01/2005)

ESB-2004.0779 -- Cisco Security Advisory -- Default Administrative Password in Cisco Guard and Traffic Anomaly Detector - Default credentials in Cisco Guard and Cisco Traffic Anomoly Detector allow administrative access (16/12/2004)

ESB-2004.0778 -- Cisco Security Advisory -- Cisco Unity Integrated with Exchange Has Default Passwords - Default credentials in Cisco Unity when integrated with Microsoft Exchange allows administrator compromise (16/12/2004)

ESB-2004.0722 -- Cisco Security Advisory -- Crafted Timed Attack Evades Cisco Security Agent Protections - A flaw in Cisco Secure Agent may allow an attacker to bypass protection mechanisms to exploit unpatched vulnerabilities on the host. (12/11/2004)

ESB-2004.0719 -- Cisco Security Advisory -- Cisco IOS DHCP Blocked Interface Denial-of-Service - In multiple Cisco products, malformed DHCP packets can cause a denial of service to interfaces where the DHCP service has not been disabled. (11/11/2004)

ESB-2004.0699 -- Cisco Security Advisory -- Vulnerability in Cisco Secure Access Control Server EAP-TLS Authentication - A Cisco ACS Server that is configured to use EAP-TLS to authenticate users to the network will allow access to any user that uses a cryptographically correct certificate as long as the user name is valid. (03/11/2004)

ESB-2004.0551 -- MIT krb5 Security Advisory 2004-003 -- ASN.1 decoder denial of service - (01/09/2004)

ESB-2004.0550 -- Cisco Security Advisory -- Vulnerabilities in Kerberos 5 Implementation - (01/09/2004)

AL-2004.026 -- MIT krb5 Security Advisory 2004-002 -- double-free vulnerabilities in KDC and libraries - A vulnerability allowing remote execution of arbitrary code has been reported in Kerberos 5 Key Distribution Center. (01/09/2004)

ESB-2004.0545 -- Cisco Security Advisory -- Cisco Telnet Denial of Service Vulnerability - (31/08/2004)

ESB-2004.0538 -- SYM04-012 -- Symantec IPsec/ISAKMP VPN Buffer Overflow - A buffer overflow vulnerability exists in the isakmpd service of several Symantec products that may potentially result in remote compromise. (27/08/2004)

ESB-2004.0535 -- Symantec 20040715-00 Entrust Updates -- Multiple Products isakmpd Denial of Service Vulnerability - A vulnerability exists in the isakmpd service of several Symantec products that may result in a denial of service for services that depend upon isakmpd, such as VPN connections. (26/08/2004)

ESB-2004.0533 -- Cisco Security Advisory -- Multiple Vulnerabilities in Cisco Secure Access Control Server - This advisory documents multiple Denial of Service (DoS) and authentication related vulnerabilities for the Access Control Server for Windows and the Access Control Server Solution Engine servers. (26/08/2004)

ESB-2004.0519 -- Cisco Security Advisory -- Cisco IOS Malformed OSPF Packet Causes Reload - A Cisco device running Internetwork Operating System (IOS) and enabled for the Open Shortest Path First (OSPF) protocol is vulnerable to a Denial of Service (DoS) attack from a malformed OSPF packet. The OSPF protocol is not enabled by default. (19/08/2004)

ESB-2004.0504 -- iDEFENSE Security Advisory 08.05.04 -- Thompson SpeedTouch Home ADSL Modem Predictable TCP ISN Generation - (10/08/2004)

ESB-2004.0484 -- Juniper Networks NetScreen Advisory 59147 -- Remote crash of ScreenOS via the SSHv1 service - The Juniper Networks NetScreen firewall SSHv1 service implementation has a bug which allows an attacker to crash ScreenOS. (05/08/2004)

ESB-2004.0475 -- CIAC BULLETIN O-190 -- Check Point ASN.1 VPN-1 Buffer Overrun - An ASN.1 issue has been discovered affecting Check Point VPN-1 products during negotiations of a VPN tunnel which may result in a remote attacker gaining access to the VPN without authentication. (29/07/2004)

ESB-2004.0465 -- Cisco Security Advisory -- Cisco ONS 15327, ONS 15454, ONS 15454 SDH, and ONS 15600 Malformed Packet Vulnerabilities - (22/07/2004)

ESB-2004.0452 -- CIAC BULLETIN REVISED O-101 -- OpenSSL Denial of Service Vulnerability - (13/07/2004)

ESB-2004.0439 -- Juniper NetScreen Advisory 59147 -- Potential HTTP cross-site script execution in NetScreen-5GT Antivirus engine - (05/07/2004)

ESB-2004.0436 -- Cisco Security Advisory -- Cisco Collaboration Server Vulnerability - (01/07/2004)

ESB-2004.0430 -- Symantec Security Bulletin - SYM04-010 -- Symantec Gateway Security Products DNS Cache Poisoning Vulnerability - Symantec resolved a DNS cache poisoning vulnerability that was reported to impact the Symantec Gateway Security products. Under specific conditions and configurations, incorrect or false DNS records could be inserted into the DNS cache tables. It would then be possible that legitimate DNS requests would return incorrect responses. (25/06/2004)

ESB-2004.0414 -- Cisco Security Advisory -- Cisco IOS Malformed BGP packet causes reload - A Cisco device running IOS and enabled for the Border Gateway Protocol (BGP) is vulnerable to a Denial of Service (DOS) attack from a malformed BGP packet. This issue affects all Cisco devices running any unfixed version of Cisco IOS code and configured for BGP routing. (17/06/2004)

ESB-2004.0394 -- Cisco Security Advisory -- Cisco CatOS Telnet, HTTP and SSH Vulnerability - (10/06/2004)

ESB-2004.0380 -- iDEFENSE Security Advisory 05.27.04 -- 3Com OfficeConnect Remote 812 ADSL Router Authentication Bypass Vulnerability - (02/06/2004)

ESB-2004.0367 -- HP Security Bulletin SSRT4724 -- HP integrated Lights Out (iLO) Denial of Service (DoS) using port zero - (26/05/2004)

ESB-2004.0296 -- US-CERT Technical Cyber Security Alert TA04-111B -- Cisco IOS SNMP Message Handling Vulnerability - (22/04/2004)

ESB-2004.0298 -- Cisco Security Advisory -- Vulnerabilities in SNMP Message Processing - (22/04/2004)

ESB-2004.0295 -- US-CERT Technical Cyber Security Alert TA04-111A -- Vulnerabilities in TCP - There is a vulnerability in TCP which allows remote attackers to terminate network sessions. Sustained exploitation of this vulnerability could lead to a denial of service condition. (22/04/2004)

ESB-2004.0293 -- Cisco Security Advisory -- TCP Vulnerabilities in Multiple IOS-Based Cisco Products - (21/04/2004)

ESB-2004.0292 -- Cisco Security Advisory -- TCP Vulnerabilities in Multiple Non-IOS Cisco Products - (21/04/2004)

AL-2004.13 -- Vulnerabilities in SNMP Message Processing - Cisco Internetwork Operating System (IOS) Software releases may contain a vulnerability in processing SNMP requests which, if exploited, could cause the device to reload. (21/04/2004)

AL-2004.12 -- NISCC Vulnerability Advisory 236929 - Vulnerability Issues in TCP - There is a vulnerability in TCP which allows remote attackers to terminate network sessions. The Border Gateway Protocol (BGP) is judged to be potentially most affected by this vulnerability. (21/04/2004)

ESB-2004.0279 -- Cisco Security Notice -- Cisco IPsec VPN Implementation Group Password Usage Vulnerability - (16/04/2004)


Previous  1, 2, 3 ... 21, 22, 23 ... 25, 26, 27  Next denotes AusCERT member only content.