Jacob Thompson

**Name of the Vulnerable Software and Affected Versions** Hills ComNav Version 3002-19 **Description** The issue allows local attackers to brute-force credentials due to the lack of a limit on the number of attempts to authenticate for the local configuration pages of the Hills ComNav interface. **Recommendations** For Hills ComNav Version 3002-19, consider implementing a limit on the number of authentication attempts or temporarily restricting access to the local configuration pages to minimize the risk of exploitation.

Name of the Vulnerable Software and Affected Versions: Oracle Solaris versions 10 and 11 Description: The issue is related to a buffer overflow vulnerability in the Pluggable authentication module of Oracle Solaris, which can be exploited by an unauthenticated attacker with network access via multiple protocols to compromise the system. This vulnerability may significantly impact additional products and can result in the takeover of Oracle Solaris. There have been reports of real-world attacks exploiting this issue, with an exploit being sold on the black market. The vulnerability is easily exploitable and can allow remote takeover of the system. Recommendations: For Oracle Solaris versions 10 and 11, update to a version that is not affected by this vulnerability, as the exact fixed version is not specified. As a temporary workaround, consider disabling the `parse user name()` function of the Pluggable authentication module until a patch is available. Restrict access to the Pluggable authentication module to minimize the risk of exploitation. Avoid using the Pluggable authentication module for SSHD or other network services until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** NETGEAR WNR3500U and WNR3500L routers (affected versions not specified) **Description** The issue concerns the generation of form tokens based solely on the router's current date and time, allowing attackers to potentially guess the CSRF tokens. **Recommendations** For NETGEAR WNR3500U and WNR3500L routers, consider implementing additional security measures to protect against CSRF attacks, such as regenerating tokens after a short period or using a more secure token generation method. At the moment, there is no information about a newer version that contains a fix for this vulnerability.