CVE-2004-0244: Improper Input Validation

Cisco 6000, 6500, and 7600 series systems with Multilayer Switch Feature Card 2 MSFC2 and a FlexWAN or OSM module allow local users to cause a denial of service hang or reset by sending a layer 2 frame packet that encapsulates a layer 3 packet, but has inconsistent length values with that packet...

Cisco Security Advisory: Cisco 6000/6500/7600 Crafted Layer 2 Frame Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco 6000/6500/7600 Crafted Layer 2 Frame Vulnerability Revision 1.0 - FINAL For Public Release 2004 February 03 1600 UTC GMT - ---------------------------------------------------------------------------- Contents Summary...

CVE-2001-1520

Xircom REX 6000 allows local users to obtain the 10 digit PIN by starting a serial monitor, connecting to the personal digital assistant PDA via Rextools, and capturing the cleartext PIN...

CVE-2001-0669: Undefined Security Weakness

Various Intrusion Detection Systems IDS including 1 Cisco Secure Intrusion Detection System, 2 Cisco Catalyst 6000 Intrusion Detection System Module, 3 Dragon Sensor 4.x, 4 Snort before 1.8.1, 5 ISS RealSecure Network Sensor 5.x and 6.x before XPU 3.2, and 6 ISS RealSecure Server Sensor 5.5 and 6...

CVE-1999-1151

CVE-1999-1151 affects the Compaq/Microcom 6000 Access Integrator. The issue is that the device does not time out sessions after prompting for credentials, enabling remote parties to cause a denial of service by connecting without providing a username or password. The provided documents do not spe...

CVE-1999-1152

The CVE-1999-1152 entry concerns Compaq/Microcom 6000 Access Integrator. Affected component: the authentication handling in the 6000 Access Integrator where, after a certain number of failed login attempts, the system does not disconnect the client. This behavior enables remote attackers to perfo...

CVE-1999-1196

CVE-1999-1196 affects Hummingbird Exceed X version 5. Remote denial of service can be triggered by malformed data sent to port 6000. This is documented across multiple sources (NVD/NIST and CVE list). The connected OpenVAS/Nessus entries reiterate a remote crash/vector via arbitrary data, but do ...

CVE-1999-1151

Compaq/Microcom 6000 Access Integrator does not cause a session timeout after prompting for a username or password, which allows remote attackers to cause a denial of service by connecting to the integrator without providing a username or password...

CVE-1999-1196

Hummingbird Exceed X version 5 allows remote attackers to cause a denial of service via malformed data to port 6000...

CVE-1999-1152: Improper Restriction of Excessive Authentication Attempts

Compaq/Microcom 6000 Access Integrator does not disconnect a client after a certain number of failed login attempts, which allows remote attackers to guess usernames or passwords via a brute force attack...

CVE-1999-1196: Undefined Security Weakness

Hummingbird Exceed X version 5 allows remote attackers to cause a denial of service via malformed data to port 6000...

CVE-1999-1151: Undefined Security Weakness

Compaq/Microcom 6000 Access Integrator does not cause a session timeout after prompting for a username or password, which allows remote attackers to cause a denial of service by connecting to the integrator without providing a username or password...

CVE-2001-0080: Undefined Security Weakness

Cisco Catalyst 6000, 5000, or 4000 switches allow remote attackers to cause a denial of service by connecting to the SSH service with a non-SSH client, which generates a protocol mismatch error...

CVE-2001-0041: Undefined Security Weakness

Memory leak in Cisco Catalyst 4000, 5000, and 6000 series switches allows remote attackers to cause a denial of service via a series of failed telnet authentication attempts...

CVE-2000-0453

XFree86 3.3.x and 4.0 are affected by a DoS due to a negative counter value in a malformed TCP packet sent to port 6000. The root cause is a malformed/negative counter handling in the TCP processing. Practical impact is denial of service as described; no exploitation details are provided in the d...

CVE-2000-0453: Undefined Security Weakness

XFree86 3.3.x and 4.0 allows a user to cause a denial of service via a negative counter value in a malformed TCP packet that is sent to port 6000...

Nasty XFree Xserver DoS

Hi, Here's a very interesting DoS which I discovered against XFree86-3.3.5. I've had confirmation it also affects 3.3.6 and 4.0 with a small difference, see below SUMMARY ======= Remote users can, by sending a malformed packet to port 6000 TCP, cause a victim X server to freeze for a couple of...

CVE-1999-1196

Hummingbird Exceed X version 5 allows remote attackers to cause a denial of service via malformed data to port 6000...

PT-1998-1157 · Compaq/Microcom · Compaq/Microcom 6000 Access Integrator

Name of the Vulnerable Software and Affected Versions: Compaq/Microcom 6000 Access Integrator affected versions not specified Description: The issue allows remote attackers to guess usernames or passwords via a brute force attack because the system does not disconnect a client after a certain...