1728 matches found
Cisco Catalyst switches allow access to "enable mode" without password
Overview Cisco Catalyst OS 7.51 contains a vulnerability that allows anyone who can obtain command line access to gain "enable" mode access without knowledge of the "enable" password. Description Cisco Catalyst OS is an operating system for Cisco's line of Catalyst switches. Version 7.51 of...
CVE-2003-0216
Unknown vulnerability in Cisco Catalyst 7.51 allows local users to bypass authentication and gain access to the enable mode without a password...
CVE-2003-0216
CVE-2003-0216 affects Cisco Catalyst 7.5(1) and describes a local-auth bypass that lets an attacker gain enable-mode access without a password. Root cause and exploit details are not provided in the initial documents, but multiple sources (NVD, CVE list, Nessus plugin) confirm a password bypass v...
Cisco Security Advisory: Cisco Catalyst Enable Password Bypass Vulnerability
...
Cisco Catalyst CatOS Authentication Bypass Vulnerability
Description A vulnerability has been reported for Cisco Catalyst switches that may result in unauthorized access to the enable level. The vulnerability exists due to the way the 'enable' mode is accessed through the switch. An attacker who is able to obtain command line access to a vulnerable...
Cisco Catalyst Enable Access Authentication Bypass (CSCea42030)
The remote Catalyst is affected by a password bypass vulnerability. Basically, an attacker who has a command line access may gain the 'enable' privileges without having to know the right password, which would allow him to reconfigure this host remotely. This vulnerability is documented with the...
Cisco Catalyst SSH Large Packet CPU Consumption DoS (CSCdv85279, CSCdw59394)
It is possible to make the remote CatOS crash when sending malformed SSH packets. This vulnerability is documented with the CISCO bug ID CSCdv85279 and CSCdw59394 C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid11382; scriptversion"1.26"; scriptcveid"CVE-2002-1024";...
Cisco Catalyst Switches Embedded HTTP Server Long HTTP Request DoS (CSCdy26428)
The remote switch is vulnerable to a buffer overflow in its embedded HTTP server. An attacker may use this flaw to make your switch reboot continuously, resulting in a denial of service. This vulnerability is documented with the CISCO bug ID CSCdy26428. C Tenable Network Security, Inc...
CVE-2002-2316
Cisco Catalyst 4000 series switches running CatOS 5.5.5, 6.3.5, and 7.1.2 do not always learn MAC addresses from a single initial packet, which causes unicast traffic to be broadcast across the switch and allows remote attackers to obtain sensitive network information by sniffing...
Cisco Security Advisory: OSM Line Card Header Corruption Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Cisco Security Advisory: OSM Line Card Header Corruption Vulnerability ======================================================================== Revision 1.0 FINAL For Public Release 2002 December 11 16:00 UTC -...
CVE-2002-1222
Buffer overflow in the embedded HTTP server for Cisco Catalyst switches running CatOS 5.4 through 7.3 allows remote attackers to cause a denial of service reset via a long HTTP request...
Cisco Catalist HTTP buffer overflow
Buffer overflow in HTTP interface on oversized query...
Security Advisory: Scanning for SSH Can Cause a Crash
-----BEGIN PGP SIGNED MESSAGE----- Security Advisory: Scanning for SSH Can Cause a Crash Revision 1.0 For Public Release 2002 June 27 16:00 UTC 0000 - --------------------------------------------------------------------------- Summary ======= While fixing vulnerabilities mentioned in the Cisco...
Cisco CatOS Telnet Option Handling Overflow (CSCdw19195)
Some Cisco Catalyst switches, running certain CatOS based software releases, have a vulnerability wherein a buffer overflow in the telnet option handling can cause the telnet daemon to crash and result in a switch reload. This vulnerability can be exploited to initiate a denial of service DoS...
Cisco Catalyst 5000 Series Frame STP Port Broadcast DoS (CSCdt62732)
When an 802.1x IEEE standard for port based network access control frame is received by an affected Catalyst 5000 series switch on a STP Spanning Tree Protocol blocked port it is forwarded in that VLAN Virtual Local Area Network instead of being dropped. This causes a performance impacting 802.1x...
Cisco Catalyst Telnetd Authentication Failure Saturation Memory Leak Remote DoS (CSCds66191)
A series of failed telnet authentication attempts to the switch can cause the Catalyst Switch to fail to pass traffic or accept management connections until the system is rebooted or a power cycle is performed. All types of telnet authentication are affected, including Kerberized telnet, and AAA...
Cisco Security Advisory: Cisco CatOS Telnet Buffer Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Cisco Security Advisory: Cisco CatOS Telnet Buffer Vulnerability ================================================================ Revision 1.0 For Public Release 2002 January 29 at 1500 UTC -...
Переполнение буфера в telnet-демоне Cisco Catalist (buffer overflow)
No description provided...
CVE-2000-0945
The web configuration interface for Catalyst 3500 XL switches allows remote attackers to execute arbitrary commands without authentication when the enable password is not set, via a URL containing the /exec/ directory...
CVE-2000-0945
CVE-2000-0945 affects Cisco Catalyst 3500 XL devices where the web configuration interface exposes an HTTP path /exec/ and allows remote command execution when the enable password is not set. Provided connected documents describe that an unauthenticated user can trigger arbitrary commands by requ...