Search: "3com"

42 CVEs found

CVE-1999-0193
5.0 MEDIUM

Denial of service in Ascend and 3com routers, which can be rebooted by sending a zero length TCP option.

Published: 1997-12-01
Products: 1
Vendors:
ascend
CVE-1999-1336
5.0 MEDIUM

3Com HiPer Access Router Card (HiperARC) 4.0 through 4.2.29 allows remote attackers to cause a denial of service (reboot) via a flood of IAC packets to the telnet port.

Published: 1999-08-12
Products: 1
Vendors:
3com

Management information base (MIB) for a 3Com SuperStack II hub running software version 2.10 contains an object identifier (.1.3.6.1.4.1.43.10.4.2) that is accessible by a read-only community string, ...

Published: 1999-08-30
Products: 1
Vendors:
3com
CVE-2001-1291
9.8 CRITICAL

The telnet server for 3Com hardware such as PS40 SuperStack II does not delay or disconnect remote attackers who provide an incorrect username or password, which makes it easier to break into the serv...

Published: 2001-07-12
Products: 2
Vendors:
3com
CVE-2001-0352
5.0 MEDIUM

SNMP agents in 3Com AirConnect AP-4111 and Symbol 41X1 Access Point allow remote attackers to obtain the WEP encryption key by reading it from a MIB when the value should be write-only, via (1) dot11W...

Published: 2001-07-21
Products: 2
Vendors:
3com symbol
CVE-2001-1293
5.0 MEDIUM

Buffer overflow in web server of 3com HomeConnect Cable Modem External with USB (#3CR29223) allows remote attackers to cause a denial of service (crash) via a long HTTP request.

Published: 2001-09-26
Products: 1
Vendors:
3com
CVE-2001-0740
5.0 MEDIUM

3COM OfficeConnect 812 and 840 ADSL Router 4.2, running OCR812 router software 1.1.9 and earlier, allows remote attackers to cause a denial of service via a long string containing a large number of "%...

Published: 2001-10-18
Products: 2
Vendors:
3com

3Com OfficeConnect Remote 812 ADSL Router, firmware 1.1.9 and 1.1.7, allows remote attackers to bypass port access restrictions by connecting to an approved port and quickly connecting to the desired ...

Published: 2002-10-04
Products: 2
Vendors:
3com

Buffer overflow in ftpd 5.4 in 3Com NBX 4.0.17 or ftpd 5.4.2 in 3Com NBX 4.1.4 allows remote attackers to cause a denial of service (crash) via a long CEL command.

Published: 2002-12-31
Products: 3
Vendors:
3com
CVE-2003-0291
5.0 MEDIUM

3com OfficeConnect Remote 812 ADSL Router 1.1.7 does not properly clear memory from DHCP responses, which allows remote attackers to identify the contents of previous HTTP requests by sniffing DHCP pa...

Published: 2003-06-16
Products: 1
Vendors:
3com
CVE-2004-1977
5.0 MEDIUM

3com NBX IP VOIP NetSet Configuration Manager allows remote attackers to cause a denial of service (crash) via a Nessus scan in safeChecks mode.

Published: 2004-04-29
Products: 4
Vendors:
3com
CVE-2004-0476
5.0 MEDIUM

Buffer overflow in 3Com OfficeConnect Remote 812 ADSL Router 1.1.9.4 allows remote attackers to cause a denial of service (reboot or packet loss) via a long string containing Telnet escape characters ...

Published: 2004-08-18
Products: 2
Vendors:
3com

The 3COM Wireless router 3CRADSL72 running Boot Code 1.3d allows remote attackers to gain sensitive information such as passwords and router settings via a direct HTTP request to app_sta.stm.

Published: 2004-10-13
Products: 1
Vendors:
3com
CVE-2004-0477
10.0 HIGH

Unknown vulnerability in 3Com OfficeConnect Remote 812 ADSL Router allows remote attackers to bypass authentication via repeated attempts using any username and password. NOTE: this identifier was in...

Published: 2004-12-06
Products: 2
Vendors:
3com
CVE-2004-2457
5.0 MEDIUM

Unspecified vulnerability in 3Com OfficeConnect ADSL 11g Router allows remote attackers to cause a denial of service (crash) via a large amount of UDP traffic.

Published: 2004-12-31
Products: 4
Vendors:
3com

Unspecified vulnerability in 3Com SuperStack 3 4400 switches with firmware version before 3.31 allows remote attackers to cause a denial of service (device reset) via a crafted request to the web mana...

Published: 2004-12-31
Products: 4
Vendors:
3com
CVE-2005-0112
5.0 MEDIUM

The web-based administrative interface for 3Com OfficeConnect Wireless 11g Access Point (AP) 1.00.08, and possibly earlier versions before 1.03.07A, allows remote attackers to bypass authentication an...

Published: 2005-04-14
Products: 3
Vendors:
3com

Multiple heap-based buffer overflows in 3Com 3CServer allow remote authenticated users to execute arbitrary code via long FTP commands, as demonstrated using the STAT command.

Published: 2005-04-27
Products: 1
Vendors:
3com
CVE-2005-0275
5.0 MEDIUM

TFTP in 3Com 3CDaemon 2.0 revision 10 allows remote attackers to cause a denial of service (application crash) via a GET request containing an MS-DOS device name.

Published: 2005-05-02
Products: 1
Vendors:
3com
CVE-2005-0276
5.0 MEDIUM

Multiple format string vulnerabilities in the FTP service in 3Com 3CDaemon 2.0 revision 10 allow remote attackers to cause a denial of service (application crash) via format string specifiers in (1) t...

Published: 2005-05-02
Products: 1
Vendors:
3com