46 matches found
CVE-2004-1775
CVE-2004-1775 affects Cisco VACM (View-based Access Control MIB) used by CatOS and IOS. Affected: CatOS 5.5/6.1 and IOS 12.0/12.1. Issue: VACM permits remote read/write of device configuration via the read-write SNMP community string, enabling unauthorized read/modify actions. Evidence in connect...
CVE-2004-1775
Cisco VACM View-based Access Control MIB for Catalyst Operating Software CatOS 5.5 and 6.1 and IOS 12.0 and 12.1 allows remote attackers to read and modify device configuration via the read-write community string...
CVE-2004-1775: Undefined Security Weakness
Cisco VACM View-based Access Control MIB for Catalyst Operating Software CatOS 5.5 and 6.1 and IOS 12.0 and 12.1 allows remote attackers to read and modify device configuration via the read-write community string...
CVE-2002-1222
The CVE-2002-1222 entry describes a vulnerability in Cisco Catalyst switches running CatOS 5.4–7.3 where the embedded HTTP server is vulnerable to a buffer overflow. An unauthenticated remote attacker can trigger a denial of service (reset/reboot) by sending a long HTTP request, as indicated by t...
CVE-2002-1222: Improper Restriction of Operations within the Bounds of a Memory Buffer
Buffer overflow in the embedded HTTP server for Cisco Catalyst switches running CatOS 5.4 through 7.3 allows remote attackers to cause a denial of service reset via a long HTTP request...
CVE-2004-0551
Cisco CatOS 5.x before 5.520 through 8.x before 8.22 and 8.32GLX, as used in Catalyst switches, allows remote attackers to cause a denial of service system crash and reload by sending invalid packets instead of the final ACK portion of the three-way handshake to the 1 Telnet, 2 HTTP, or 3 SSH...
CVE-2004-0551
Cisco CatOS 5.x before 5.520 through 8.x before 8.22 and 8.32GLX, as used in Catalyst switches, allows remote attackers to cause a denial of service system crash and reload by sending invalid packets instead of the final ACK portion of the three-way handshake to the 1 Telnet, 2 HTTP, or 3 SSH...
CVE-2004-0551
Cisco CatOS TCP-ACK handling vulnerability (CVE-2004-0551) affects CatOS on Cisco Catalyst switches: 5.x before 5.5(20) through 8.x before 8.2(2) and 8.3(2)GLX. A remote attacker can cause a denial of service (system crash/reload) by sending invalid packets instead of the final ACK in the TCP thr...
Cisco CatOS TCP ACK handling vulnerability
Overview A vulnerability in Cisco CatOS may allow a remote attacker to cause a denial of service on an affected device. Description Cisco's CatOS is an operating system that runs on some Cisco Catalyst switch products. A vulnerability in the way that TCP services on CatOS handle malformed...
CVE-2004-0551: Undefined Security Weakness
Cisco CatOS 5.x before 5.520 through 8.x before 8.22 and 8.32GLX, as used in Catalyst switches, allows remote attackers to cause a denial of service system crash and reload by sending invalid packets instead of the final ACK portion of the three-way handshake to the 1 Telnet, 2 HTTP, or 3 SSH...
Cisco CatOS TCP-ACK Remote DoS (CSCec42751, CSCed45576, CSCed48590)
The remote switch is vulnerable to various flaws that could allow an attacker to disable this device remotely by doing a TCP-ACK denial of service attack. This vulnerability is documented with the CISCO bugs ID CSCec42751, CSCed45576 and CSCed48590. C Tenable Network Security include"compat.inc";...
Cisco CatOS incomplete TCP session DoS
Invalid packet on 3rd TCP handshake stage causes device to fail if telnet, ssh or HTTP are enabled...
Cisco Security Advisory: Cisco CatOS Telnet, HTTP and SSH Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco CatOS Telnet, HTTP and SSH Vulnerability Revision 1.0 For Public Release 2004 June 9 at 1600 UTC GMT ---------------------------------------------------------------------- Contents Summary Affected Products Details Impac...
Cisco CatOS Telnet, HTTP and SSH Vulnerability
...
Cisco 6509 switch telnet vulnerability
A vulnerability has been found on Cisco 6509 switches. The vulnerability was found to work on 2 different Cisco 6509 switches running CATOS 5.42 and 5.52. The vulnerability can lead to information and commands being exectued on the remote switch from the login prompt. Commands can be exectued at...
Cisco Security Advisory: Denial-of-Service of TCP-based Services in CatOS
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Denial-of-Service of TCP-based Services in CatOS Revision 1.0 For Public Release 2003 July 09 at 16:00 UTC GMT - ------------------------------------------------------------------------- Summary ====== After receiving eight TC...
Denial-of-Service of TCP-based Services in CatOS
...
CVE-2002-1222
Buffer overflow in the embedded HTTP server for Cisco Catalyst switches running CatOS 5.4 through 7.3 allows remote attackers to cause a denial of service reset via a long HTTP request...
Cisco Security Advisory: Cisco CatOS Embedded HTTP Server Buffer Overflow
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco CatOS Embedded HTTP Server Buffer Overflow Revision 1.0 FINAL ================== For Public Release 2002 October 16 17:00 UTC - ------------------------------------------------------------------------------ Please provid...