Cisco Catalyst SSH Large Packet CPU Consumption DoS (CSCdv85279, CSCdw59394)

It is possible to make the remote CatOS crash when sending malformed SSH packets. This vulnerability is documented with the CISCO bug ID CSCdv85279 and CSCdw59394 C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid11382; scriptversion"1.26"; scriptcveid"CVE-2002-1024";...

Cisco Catalyst Switches Embedded HTTP Server Long HTTP Request DoS (CSCdy26428)

The remote switch is vulnerable to a buffer overflow in its embedded HTTP server. An attacker may use this flaw to make your switch reboot continuously, resulting in a denial of service. This vulnerability is documented with the CISCO bug ID CSCdy26428. C Tenable Network Security, Inc...

CVE-2002-2316

Cisco Catalyst 4000 series switches running CatOS 5.5.5, 6.3.5, and 7.1.2 do not always learn MAC addresses from a single initial packet, which causes unicast traffic to be broadcast across the switch and allows remote attackers to obtain sensitive network information by sniffing...

Cisco Security Advisory: OSM Line Card Header Corruption Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Cisco Security Advisory: OSM Line Card Header Corruption Vulnerability ======================================================================== Revision 1.0 FINAL For Public Release 2002 December 11 16:00 UTC -...

CVE-2002-1222

Buffer overflow in the embedded HTTP server for Cisco Catalyst switches running CatOS 5.4 through 7.3 allows remote attackers to cause a denial of service reset via a long HTTP request...

Cisco Catalist HTTP buffer overflow

Buffer overflow in HTTP interface on oversized query...

Security Advisory: Scanning for SSH Can Cause a Crash

-----BEGIN PGP SIGNED MESSAGE----- Security Advisory: Scanning for SSH Can Cause a Crash Revision 1.0 For Public Release 2002 June 27 16:00 UTC 0000 - --------------------------------------------------------------------------- Summary ======= While fixing vulnerabilities mentioned in the Cisco...

Cisco Catalyst 5000 Series Frame STP Port Broadcast DoS (CSCdt62732)

When an 802.1x IEEE standard for port based network access control frame is received by an affected Catalyst 5000 series switch on a STP Spanning Tree Protocol blocked port it is forwarded in that VLAN Virtual Local Area Network instead of being dropped. This causes a performance impacting 802.1x...

Cisco Catalyst Telnetd Authentication Failure Saturation Memory Leak Remote DoS (CSCds66191)

A series of failed telnet authentication attempts to the switch can cause the Catalyst Switch to fail to pass traffic or accept management connections until the system is rebooted or a power cycle is performed. All types of telnet authentication are affected, including Kerberized telnet, and AAA...

Cisco CatOS Telnet Option Handling Overflow (CSCdw19195)

Some Cisco Catalyst switches, running certain CatOS based software releases, have a vulnerability wherein a buffer overflow in the telnet option handling can cause the telnet daemon to crash and result in a switch reload. This vulnerability can be exploited to initiate a denial of service DoS...

Cisco Security Advisory: Cisco CatOS Telnet Buffer Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Cisco Security Advisory: Cisco CatOS Telnet Buffer Vulnerability ================================================================ Revision 1.0 For Public Release 2002 January 29 at 1500 UTC -...

Переполнение буфера в telnet-демоне Cisco Catalist (buffer overflow)

No description provided...

CVE-2001-0669: Undefined Security Weakness

Various Intrusion Detection Systems IDS including 1 Cisco Secure Intrusion Detection System, 2 Cisco Catalyst 6000 Intrusion Detection System Module, 3 Dragon Sensor 4.x, 4 Snort before 1.8.1, 5 ISS RealSecure Network Sensor 5.x and 6.x before XPU 3.2, and 6 ISS RealSecure Server Sensor 5.5 and 6...

CVE-2001-0429

Cisco Catalyst 5000 series switches 6.12 and earlier will forward an 802.1x frame on a Spanning Tree Protocol STP blocked port, which causes a network storm and a denial of service...

CVE-2000-0945

The web configuration interface for Catalyst 3500 XL switches allows remote attackers to execute arbitrary commands without authentication when the enable password is not set, via a URL containing the /exec/ directory...

CVE-2000-0945

CVE-2000-0945 affects Cisco Catalyst 3500 XL devices where the web configuration interface exposes an HTTP path /exec/ and allows remote command execution when the enable password is not set. Provided connected documents describe that an unauthenticated user can trigger arbitrary commands by requ...

CVE-2001-0429

CVE-2001-0429 affects Cisco Catalyst 5000 series switches (versions 6.1(2) and earlier). The issue occurs when an 802.1x frame is received on a STP blocked port and is forwarded within that VLAN, causing a network storm and a denial of service. The connected Nessus/CSCs detail the same STP/802.1x...

CVE-2001-0429: Undefined Security Weakness

Cisco Catalyst 5000 series switches 6.12 and earlier will forward an 802.1x frame on a Spanning Tree Protocol STP blocked port, which causes a network storm and a denial of service...

CVE-1999-1129

CVE-1999-1129 affects Cisco Catalyst 2900 VLAN switches. Affected component: VLAN trunking/tag handling. Root cause: attackers can forge the 802.1q VLAN identifier in the trunking tag, enabling remote injection of frames into another VLAN. Impact (as per the entry): partial confidentiality, integ...

CVE-1999-1129: Undefined Security Weakness

Cisco Catalyst 2900 Virtual LAN VLAN switches allow remote attackers to inject 802.1q frames into another VLAN by forging the VLAN identifier in the trunking tag...