Memory corruption

A memory corruption in the IPsec code path of Brocade NetIron OS on Brocade MLXs 5.8.00 through 5.8.00e, 5.9.00 through 5.9.00bd, 6.0.00, and 6.0.00a images could allow attackers to cause a denial of service line card reset via certain constructed IPsec control packets...

CVE-2016-8203

A memory corruption in the IPsec code path of Brocade NetIron OS on Brocade MLXs 5.8.00 through 5.8.00e, 5.9.00 through 5.9.00bd, 6.0.00, and 6.0.00a images could allow attackers to cause a denial of service line card reset via certain constructed IPsec control packets...

CVE-2016-8203

CVE-2016-8203 describes a memory corruption in the IPsec code path of Brocade NetIron OS (Brocade MLXs) affecting 5.8.00–5.8.00e, 5.9.00–5.9.00bd, 6.0.00 and 6.0.00a images. Exploitation via crafted IPsec control packets could cause a denial of service (line card reset). OpenVAS advisory/Brocade ...

BSA-2016-168

Security Advisory ID : BSA-2016-168 Component : NetIron Revision : 2.0: Final A memory corruption in the IPsec code path of BrocadeNetIronOS on Brocade MLXs 5.8.00 through 5.8.00e, 5.9.00 through 5.9.00bd, 6.0.00 and 6.0.00a images could allow attackers to cause a denial of service line card rese...

BSA-2016-134

Security Advisory ID : BSA-2016-134 Component : Crypto Revision : 2.0: Final The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a birthday bound of approximately four billion blocks, which makes it easier for remote attackers to...

Brocade Fabric OS 6.3.1b Weak System Configuration

Title: Brocade Fabric OS v6.3.1b - Multiple vulnerabilities Discovered by: Karn Ganeshen Vendor Homepage: www.brocade.com Versions Reported: Kernel 2.6.14.2 + FabOS v6.3.1b + BootProm 1.0.9 version Kernel: 2.6.14.2 Fabric OS: v6.3.1b BootProm: 1.0.9 1 Default diagnostic accounts root and factory...

BSA-2015-1935

Security Advisory ID : BSA-2015-1935 Component : TLS protocol 1.2 Revision : 5.0 The TLS protocol 1.2 and earlier, when a DHEEXPORT ciphersuite is enabled on a server but not on a client, does not properly convey a DHEEXPORT choice, which allows man-in-the-middle attackers to conduct...

Brocade Enable Login Check Scanner

This module will test a range of Brocade network devices for a privileged logins and report successes. The device authentication mode must be set as 'aaa authentication enable default local'. Telnet authentication, e.g. 'enable telnet authentication', should not be enabled in the device...

CVE-2014-4870

/opt/vyatta/bin/sudo-users/vyatta-clear-dhcp-lease.pl on the Brocade Vyatta 5400 vRouter 6.4Rx, 6.6Rx, and 6.7R1 does not properly validate parameters, which allows local users to gain privileges by leveraging the sudo configuration...

CVE-2014-4868

The management console on the Brocade Vyatta 5400 vRouter 6.4Rx, 6.6Rx, and 6.7R1 allows remote authenticated users to execute arbitrary Linux commands via shell metacharacters in a console command...

CVE-2014-4869

The Brocade Vyatta 5400 vRouter 6.4Rx, 6.6Rx, and 6.7R1 allows attackers to obtain sensitive encrypted-password information by leveraging membership in the operator group...

Design/Logic Flaw

/opt/vyatta/bin/sudo-users/vyatta-clear-dhcp-lease.pl on the Brocade Vyatta 5400 vRouter 6.4Rx, 6.6Rx, and 6.7R1 does not properly validate parameters, which allows local users to gain privileges by leveraging the sudo configuration...

Design/Logic Flaw

The Brocade Vyatta 5400 vRouter 6.4Rx, 6.6Rx, and 6.7R1 allows attackers to obtain sensitive encrypted-password information by leveraging membership in the operator group...

Command injection

The management console on the Brocade Vyatta 5400 vRouter 6.4Rx, 6.6Rx, and 6.7R1 allows remote authenticated users to execute arbitrary Linux commands via shell metacharacters in a console command...

CVE-2014-4868

The CVE-2014-4868 issue affects Brocade Vyatta 5400 vRouter versions 6.4R(x), 6.6R(x), and 6.7R1. The vulnerability is an OS command injection in the management console: remote authenticated users can inject shell metacharacters in a console command to break out of the management shell and execut...

CVE-2014-4870

CVE-2014-4870 affects Brocade Vyatta 5400 vRouter versions 6.4R(x), 6.6R(x), and 6.7R1. The issue arises from improper input validation in /opt/vyatta/bin/sudo-users/vyatta-clear-dhcp-lease.pl, enabling a non-root user to leverage the sudo configuration to gain root privileges. Connected sources ...

CVE-2014-4868

The management console on the Brocade Vyatta 5400 vRouter 6.4Rx, 6.6Rx, and 6.7R1 allows remote authenticated users to execute arbitrary Linux commands via shell metacharacters in a console command...

CVE-2014-4869

The Brocade Vyatta 5400 vRouter 6.4Rx, 6.6Rx, and 6.7R1 allows attackers to obtain sensitive encrypted-password information by leveraging membership in the operator group...

CVE-2014-4869

CVE-2014-4869 affects Brocade Vyatta 5400 vRouter versions 6.4R(x), 6.6R(x), and 6.7R1. The root cause is improper access control where users in the default operator group can access files containing encrypted passwords, enabling exposure of sensitive credentials. The NVD/CERT entries confirm thi...

CVE-2014-4870

/opt/vyatta/bin/sudo-users/vyatta-clear-dhcp-lease.pl on the Brocade Vyatta 5400 vRouter 6.4Rx, 6.6Rx, and 6.7R1 does not properly validate parameters, which allows local users to gain privileges by leveraging the sudo configuration...