Vulnerabilities > Dell > Medium

DATE CVE VULNERABILITY TITLE RISK
2007-08-15 CVE-2007-4360 Remote Access Card 4/P SSH Remote Denial Of Service vulnerability in Dell Remote Access Card 4
Unspecified vulnerability in Dell Remote Access Card 4 (DRAC4) with firmware 1.50 Build 02.16 allows remote attackers to cause a denial of service (SSH daemon crash) via certain network traffic, as demonstrated by an "nmap -O" scan with nmap 4.03, possibly related to a Mocana (Mocanada) SSH vulnerability.
network
dell
4.3
2007-05-22 CVE-2006-3894 Unspecified vulnerability in Dell Bsafe Cert-C and Bsafe Crypto-C
The RSA Crypto-C before 6.3.1 and Cert-C before 2.8 libraries, as used by RSA BSAFE, multiple Cisco products, and other products, allows remote attackers to cause a denial of service via malformed ASN.1 objects.
network
low complexity
dell
5.0
2006-08-25 CVE-2006-2113 Improper Authentication vulnerability in multiple products
The embedded HTTP server in Fuji Xerox Printing Systems (FXPS) print engine, as used in products including (1) Dell 3000cn through 5110cn and (2) Fuji Xerox DocuPrint firmware before 20060628 and Network Option Card firmware before 5.13, does not properly perform authentication for HTTP requests, which allows remote attackers to modify system configuration via crafted requests, including changing the administrator password or causing a denial of service to the print server.
network
low complexity
dell fuji-xerox CWE-287
6.4
2005-12-08 CVE-2005-3661 Remote Credential Reset vulnerability in Dell TrueMobile 2300
Dell TrueMobile 2300 Wireless Broadband Router running firmware 3.0.0.8 and 5.1.1.6, and possibly other versions, allows remote attackers to reset authentication credentials, then change configuration or firmware, via a direct request to apply.cgi with the Page parameter set to adv_password.asp.
network
low complexity
dell
5.0
2004-11-23 CVE-2004-0331 Heap Overflow vulnerability in Dell OpenManage Web Server POST Request
Heap-based buffer overflow in Dell OpenManage Web Server 3.4.0 allows remote attackers to cause a denial of service (crash) via a HTTP POST with a long application variable.
network
low complexity
dell
5.0
2004-11-23 CVE-2004-0081 OpenSSL 0.9.6 before 0.9.6d does not properly handle unknown message types, which allows remote attackers to cause a denial of service (infinite loop), as demonstrated using the Codenomicon TLS Test Tool. 5.0