SecurityFocus

PR08-24: Proxim Tsunami MP.11 2411 vulnerable to SNMP Injection Oct 09 2008 01:02PM
ProCheckUp Research (research procheckup com) (1 replies)

Re: PR08-24: Proxim Tsunami MP.11 2411 vulnerable to SNMP Injection Oct 09 2008 06:20PM
Vladimir '3APA3A' Dubrovin (3APA3A SECURITY NNOV RU) (2 replies)

Re: PR08-24: Proxim Tsunami MP.11 2411 vulnerable to SNMP Injection Oct 10 2008 08:35AM
ProCheckUp Research (research procheckup com)

Re: PR08-24: Proxim Tsunami MP.11 2411 vulnerable to SNMP Injection Oct 09 2008 09:24PM
lee e rian census gov (1 replies)

-----"Vladimir '3APA3A' Dubrovin" <3APA3A (at) SECURITY.NNOV (dot) RU [email concealed]> wrote: -----

>What can you achieve with script injection you can not achieve
>with SNMP write access?

I don't know what you can actually achieve, but in addition to whatever you
can do to/with the box you have SNMP write access for, it gives you a shot
at the admin's machine. And maybe even a shot at everything that the
admin's machine can talk to.

Regards,
Lee

>
>--Thursday, October 9, 2008, 5:02:44 PM, you wrote to
>bugtraq (at) securityfocus (dot) com [email concealed]:
>
>PR> $ snmpset -v1 -c public 192.168.1.100 sysName.0 s
>'">><script>alert(1)</script>'
>
>
>--
>~/ZARAZA http://securityvulns.com/

[ reply ]

Re[2]: PR08-24: Proxim Tsunami MP.11 2411 vulnerable to SNMP Injection Oct 10 2008 06:28AM
Vladimir '3APA3A' Dubrovin (3APA3A SECURITY NNOV RU)