news aggregator
Bugtraq: [LC-2008-04] Nokia Browser Array Sort Denial Of Service Vulnerability
Bugtraq: Re: PR08-24: Proxim Tsunami MP.11 2411 vulnerable to SNMP Injection
Bugtraq: Re[2]: PR08-24: Proxim Tsunami MP.11 2411 vulnerable to SNMP Injection
Bugtraq: ZDI-08-067: Apple CUPS 1.3.7 (HP-GL/2 filter) Remote Code Execution Vulnerability
Bugtraq: [SECURITY] CVE-2008-3271 - Apache Tomcat information disclosure
Bugtraq: Re: News Manager Remote SQL Injection Vulnerability
[LC-2008-04] Nokia Browser Array Sort Denial Of Service Vulnerability
('binary' encoding is not supported, stored as-is)
====================================================
Security Research Advisory
Vulnerability name: Nokia Browser Array Sort Denial Of Service Vulnerability
Advisory number: LC-2008-04
Advisory URL: http://www.ikkisoft.com
...
Re: PR08-24: Proxim Tsunami MP.11 2411 vulnerable to SNMP Injection
Hi 3APA3A,
That's a good question, and here is my answer from the draft version of
an upcoming paper I'm working on:
"
Gaining SNMP write access to a device is already a compromise on its own
and usually considered a potential high risk security issue. Therefore,
one could argue that...
Re[2]: PR08-24: Proxim Tsunami MP.11 2411 vulnerable to SNMP Injection
Dear lee.e.rian_at_census.gov,
Why do you think you can't do it with SNMP? An examples are settings DNS
server option via DHCP (or DNS domain name for proxy server
autodiscovery protocol) or even configuring a VPN tunnel for all
traffic. I'm not sure about...