Cisco Application Policy Infrastructure Controller Insecure Credentials Vulnerability

A vulnerability in the boot process of the Cisco Application Policy Infrastructure Controller APIC could allow an authenticated, local attacker to access the APIC as the root user. The vulnerability is due to improper implementation of access controls in the APIC system. An attacker could exploit...

CVE-2009-3640

The updatecr8intercept function in arch/x86/kvm/x86.c in the KVM subsystem in the Linux kernel before 2.6.32-rc1 does not properly handle the absence of an Advanced Programmable Interrupt Controller APIC, which allows local users to cause a denial of service NULL pointer dereference and system...

CVE-2015-6333

Cisco Application Policy Infrastructure Controller APIC 1.1j allows local users to gain privileges via vectors involving addition of an SSH key, aka Bug ID CSCuw46076...

Code injection

Cisco Application Policy Infrastructure Controller APIC 1.1j allows local users to gain privileges via vectors involving addition of an SSH key, aka Bug ID CSCuw46076...

CVE-2015-6333

Cisco Application Policy Infrastructure Controller APIC 1.1j allows local users to gain privileges via vectors involving addition of an SSH key, aka Bug ID CSCuw46076...

CVE-2015-6333

Cisco APIC (Application Policy Infrastructure Controller) 1.1j contains a local-privilege-escalation vulnerability (CVE-2015-6333) due to improper validation of SSH keys added by local users. Exploitation would require authenticated local access, enabling an attacker to add an SSH key to their ac...

CVE-2015-6333: Undefined Security Weakness

Cisco Application Policy Infrastructure Controller APIC 1.1j allows local users to gain privileges via vectors involving addition of an SSH key, aka Bug ID CSCuw46076...

PT-2015-7187

Name of the Vulnerable Software and Affected Versions Cisco Application Policy Infrastructure Controller APIC version 1.1j Description The issue allows local users to gain privileges through certain vectors involving the addition of an SSH key. Recommendations For Cisco Application Policy...

The vulnerability of the NX-OS network operating system allows a hacker to gain root user privileges.

The vulnerability of the NX-OS network operating system is related to deficiencies in access control for certain functions. Exploiting this vulnerability can allow a malicious actor, who operates remotely and has completed the authentication process, to gain root user privileges due to errors in...

Cisco Application Policy Infrastructure Controller Privilege Escalation SSH Key Vulnerability

A vulnerability in SSH key handling for user accounts in Cisco Application Policy Infrastructure Controller APIC could allow an authenticated, local attacker to elevate privileges. The vulnerability is due to improper validation of SSH keys local users add their accounts. An attacker could exploi...

Linux/x86 memory sinkhole privilege escalation proof of concept Exploit

Exploit for linux platform in category local exploits ; memory sinkhole proof of concept ; hijack ring -2 execution through the apic overlay attack. ; deployed in ring 0 ; the SMBASE register of the core under attack TARGETSMBASE equ 0x1f5ef800 ; the location of the attack GDT. ; this is determin...

Linux/x86 Memory Sinkhole Proof Of Concept

; memory sinkhole proof of concept ; hijack ring -2 execution through the apic overlay attack. ; deployed in ring 0 ; the SMBASE register of the core under attack TARGETSMBASE equ 0x1f5ef800 ; the location of the attack GDT. ; this is determined by which register will be read out of the APIC ; fo...

Linux Kernel (x86) - Memory Sinkhole Privilege Escalation

Linux Kernel x86 - Memory Sinkhole Privilege Escalation ; memory sinkhole proof of concept ; hijack ring -2 execution through the apic overlay attack. ; deployed in ring 0 ; the SMBASE register of the core under attack TARGETSMBASE equ 0x1f5ef800 ; the location of the attack GDT. ; this is...

Linux Kernel (x86) - Memory Sinkhole Privilege Escalation

; memory sinkhole proof of concept ; hijack ring -2 execution through the apic overlay attack. ; deployed in ring 0 ; the SMBASE register of the core under attack TARGETSMBASE equ 0x1f5ef800 ; the location of the attack GDT. ; this is determined by which register will be read out of the APIC ; fo...

DEBIAN-CVE-2015-4692

The kvmapichasevents function in arch/x86/kvm/lapic.h in the Linux kernel through 4.1.3 allows local users to cause a denial of service NULL pointer dereference and system crash or possibly have unspecified other impact by leveraging /dev/kvm access for an ioctl call...

Design/Logic Flaw

Cisco Application Policy Infrastructure Controller APIC devices with software before 1.03o and 1.1 before 1.11j and Nexus 9000 ACI devices with software before 11.04o and 11.1 before 11.11j do not properly restrict access to the APIC filesystem, which allows remote authenticated users to obtain...

CVE-2015-4235

Cisco Application Policy Infrastructure Controller APIC devices with software before 1.03o and 1.1 before 1.11j and Nexus 9000 ACI devices with software before 11.04o and 11.1 before 11.11j do not properly restrict access to the APIC filesystem, which allows remote authenticated users to obtain...

CVE-2015-4235

Cisco Application Policy Infrastructure Controller APIC devices with software before 1.03o and 1.1 before 1.11j and Nexus 9000 ACI devices with software before 11.04o and 11.1 before 11.11j do not properly restrict access to the APIC filesystem, which allows remote authenticated users to obtain...

CVE-2015-4235

Summary: CVE-2015-4235 affects Cisco APIC and Nexus 9000 ACI devices; versioned software before 1.0(3o) and 1.1 before 1.1(1j) on APIC, and before 11.0(4o)/11.1 before 11.1(1j) on Nexus 9000 ACI, do not properly restrict access to the APIC filesystem. This enables remote authenticated users to ob...

CVE-2015-4235: Undefined Security Weakness

Cisco Application Policy Infrastructure Controller APIC devices with software before 1.03o and 1.1 before 1.11j and Nexus 9000 ACI devices with software before 11.04o and 11.1 before 11.11j do not properly restrict access to the APIC filesystem, which allows remote authenticated users to obtain...