CVE List
| Id | CVE No. | Status | Description | Phase | Votes | Comments | Actions |
|---|---|---|---|---|---|---|---|
| 3431 | CVE-2001-0618 | Candidate | Orinoco RG-1000 wireless Residential Gateway uses the last 5 digits of the "Network Name" or SSID as the default Wired Equivalent Privacy (WEP) encryption key. Since the SSID occurs in the clear during communications, a remote attacker could determine the WEP key and decrypt RG-1000 traffic. | Proposed (20010727) | ACCEPT(1) Frech | MODIFY(1) Ziese | NOOP(3) Cole, Foat, Wall | REVIEWING(1) Bishop | Ziese> vulnerability, per se, then why is this? If WEP is delievred enabled, by | any vendor, it must give the existing/default WEP-key somewhere. Will every | hardware product be flawed by his definition? | View |
| 3432 | CVE-2001-0619 | Candidate | The Lucent Closed Network protocol can allow remote attackers to join Closed Network networks which they do not have access to. The "Network Name" or SSID, which is used as a shared secret to join the network, is transmitted in the clear. | Proposed (20010727) | MODIFY(1) Frech | NOOP(3) Cole, Foat, Wall | REJECT(1) Ziese | REVIEWING(1) Bishop | Frech> XF:orinoco-ap-plaintext-ssid(7005) | View |
| 3433 | CVE-2001-0620 | Candidate | iPlanet Calendar Server 5.0p2 and earlier allows a local attacker to gain access to the Netscape Admin Server (NAS) LDAP database and read arbitrary files by obtaining the cleartext administrator username and password from the configuration file, which has insecure permissions. | Proposed (20010727) | ACCEPT(1) Frech | NOOP(4) Cole, Foat, Wall, Ziese | REVIEWING(1) Bishop | View | |
| 3434 | CVE-2001-0621 | Entry | The FTP server on Cisco Content Service 11000 series switches (CSS) before WebNS 4.01B23s and WebNS 4.10B13s allows an attacker who is an FTP user to read and write arbitrary files via GET or PUT commands. | View | |||
| 3435 | CVE-2001-0622 | Entry | The web management service on Cisco Content Service series 11000 switches (CSS) before WebNS 4.01B29s or WebNS 4.10B17s allows a remote attacker to gain additional privileges by directly requesting the web management URL instead of navigating through the interface. | View |
Page 687 of 20943, showing 5 records out of 104715 total, starting on record 3431, ending on 3435
