CVE-2007-5440

CVE-2007-5440 affects CRS Manager. It describes multiple PHP remote file inclusion vulnerabilities allowing an attacker to execute arbitrary PHP code via a URL in the DOCUMENT_ROOT parameter to index.php or login.php. The note states the issue is disputed by CVE since DOCUMENT_ROOT cannot be modi...

PT-2007-6476 · Unknown · Crs Manager

Name of the Vulnerable Software and Affected Versions: CRS Manager affected versions not specified Description: The issue concerns multiple PHP remote file inclusion vulnerabilities. These vulnerabilities allow remote attackers to execute arbitrary PHP code via a URL in the DOCUMENT ROOT paramete...

CVE-2007-5440: Improper Input Validation

Multiple PHP remote file inclusion vulnerabilities in CRS Manager allow remote attackers to execute arbitrary PHP code via a URL in the DOCUMENTROOT parameter to 1 index.php or 2 login.php. NOTE: this issue is disputed by CVE, since DOCUMENTROOT cannot be modified by an attacker...

CRS Manager - Multiple Remote File Inclusions

CRS Manager - Multiple Remote File Inclusions source: https://www.securityfocus.com/bid/26034/info CRS Manager is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the...

CRS Manager - Multiple Remote File Inclusions

source: https://www.securityfocus.com/bid/26034/info CRS Manager is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying system; other...

CRS Manager ($DOCUMENT_ROOT) Multi Remote File Include

X---- w w w . u N k n 0 w n . e u ----X CRS Managercrsmanager Multi Remote File Include ::Home: http://crsmanager.berlios.de ::Vuln Type : Remote File Include RFI ::Discovered by : iNs ::Vuln Code: index.php login.php ?php require $DOCUMENTROOT."/../admin/settings/conf.php"; PoC:...

Code injection

Cisco IOS XR, when configured for Multi Protocol Label Switching MPLS and running on Cisco CRS-1 routers, allows remote attackers to cause a denial of service Modular Services Cards MSC crash or "MPLS packet handling problems" via certain MPLS packets, as identified by Cisco bug IDs 1 CSCsd15970...

Code injection

Cisco IOS XR, when configured for Multi Protocol Label Switching MPLS and running on Cisco CRS-1 or Cisco 12000 series routers, allows remote attackers to cause a denial of service Line card crash via certain MPLS packets, as identified by Cisco bug ID CSCsc77475...

CVE-2006-1927

Cisco IOS XR, when configured for Multi Protocol Label Switching MPLS and running on Cisco CRS-1 or Cisco 12000 series routers, allows remote attackers to cause a denial of service Line card crash via certain MPLS packets, as identified by Cisco bug ID CSCsc77475...

CVE-2006-1927

CVE-2006-1927 affects Cisco IOS XR on Cisco CRS-1 and Cisco 12000-series routers running MPLS. The issue allows remote attackers to cause a denial-of-service (line-card crash) by sending certain MPLS packets, as identified by Cisco bug CSCsc77475. The available connected documents confirm the aff...

CVE-2006-1928

Cisco IOS XR on Cisco CRS-1 routers is affected when configured for MPLS. The vulnerability allows remote attackers to cause a Denial of Service by sending certain MPLS packets, linked to Cisco bug IDs CSCsd15970 and CSCsd55531. The issue is tied to MPLS packet handling problems and MSC crashes. ...

CVE-2006-1927

Cisco IOS XR, when configured for Multi Protocol Label Switching MPLS and running on Cisco CRS-1 or Cisco 12000 series routers, allows remote attackers to cause a denial of service Line card crash via certain MPLS packets, as identified by Cisco bug ID CSCsc77475...

CVE-2006-1928

Cisco IOS XR, when configured for Multi Protocol Label Switching MPLS and running on Cisco CRS-1 routers, allows remote attackers to cause a denial of service Modular Services Cards MSC crash or "MPLS packet handling problems" via certain MPLS packets, as identified by Cisco bug IDs 1 CSCsd15970...

CVE-2006-1927: Undefined Security Weakness

Cisco IOS XR, when configured for Multi Protocol Label Switching MPLS and running on Cisco CRS-1 or Cisco 12000 series routers, allows remote attackers to cause a denial of service Line card crash via certain MPLS packets, as identified by Cisco bug ID CSCsc77475...

CVE-2006-1928: Undefined Security Weakness

Cisco IOS XR, when configured for Multi Protocol Label Switching MPLS and running on Cisco CRS-1 routers, allows remote attackers to cause a denial of service Modular Services Cards MSC crash or "MPLS packet handling problems" via certain MPLS packets, as identified by Cisco bug IDs 1 CSCsd15970...

[Full-disclosure] Cisco Security Advisory: Cisco IOS XR MPLS Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco IOS XR MPLS Vulnerabilities Advisory ID: cisco-sa-20060419-xr http://www.cisco.com/warp/public/707/cisco-sa-20060419-xr.shtml Revision 1.0 For Public Release 2006 April 19 1500 UTC GMT -...