EUVD-2010-1602

Malware in sbrugna...

EUVD-2010-1603

Malware in sbrugna...

EUVD-2001-0409

Malware in sbrugna...

EUVD-2010-2633

Malware in sbrugna...

EUVD-2015-0680

Malware in sbrugna...

EUVD-2004-0352

Malware in sbrugna...

EUVD-2001-0019

Malware in sbrugna...

CVE-2015-0667

The Management Interface on Cisco Content Services Switch CSS 11500 devices 8.20.4.02 and earlier allows remote attackers to bypass intended restrictions on local-network device access via crafted SSH packets, aka Bug ID CSCut14855...

CVE-2015-0667: Improper Access Control

The Management Interface on Cisco Content Services Switch CSS 11500 devices 8.20.4.02 and earlier allows remote attackers to bypass intended restrictions on local-network device access via crafted SSH packets, aka Bug ID CSCut14855...

CVE-2011-2064: Undefined Security Weakness

Cisco IOS 12.4MDA before 12.424MDA5 on the Cisco Content Services Gateway - Second Generation CSG2 allows remote attackers to cause a denial of service device reload via crafted ICMP packets, aka Bug ID CSCtl79577...

Design/Logic Flaw

Cisco IOS 12.411MD, 12.415MD, 12.422MD, 12.424MD before 12.424MD3, 12.422MDA before 12.422MDA5, and 12.424MDA before 12.424MDA3 on the Cisco Content Services Gateway Second Generation aka CSG2 allows remote attackers to bypass intended access restrictions and intended billing restrictions by...

CVE-2011-0348

CVE-2011-0348 affects Cisco IOS for the CSG2 (CSG2 on 12.4(11)MD, 12.4(15)MD, 12.4(22)MD, and 12.4(24)MD family) and enables a service policy bypass by sending HTTP traffic to a restricted destination after unrestricted HTTP traffic. Root cause is a vulnerability in policy/billing handling on the...

Cisco Security Advisory: Cisco Content Services Gateway Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Cisco Security Advisory: Cisco Content Services Gateway Vulnerabilities Advisory ID: cisco-sa-20110126-csg2 http://www.cisco.com/warp/public/707/cisco-sa-20110126-csg2.shtml Revision 1.0 For Public Release 2011 January 26 1600 UTC GMT...

CVE-2011-0348: Undefined Security Weakness

Cisco IOS 12.411MD, 12.415MD, 12.422MD, 12.424MD before 12.424MD3, 12.422MDA before 12.422MDA5, and 12.424MDA before 12.424MDA3 on the Cisco Content Services Gateway Second Generation aka CSG2 allows remote attackers to bypass intended access restrictions and intended billing restrictions by...

CVE-2011-0350: Undefined Security Weakness

Unspecified vulnerability in Cisco IOS 12.424MD before 12.424MD2 on the Cisco Content Services Gateway Second Generation aka CSG2 allows remote attackers to cause a denial of service device hang or reload via crafted TCP packets, aka Bug ID CSCth41891, a different vulnerability than CVE-2011-0349...

CVE-2011-0349: Undefined Security Weakness

Unspecified vulnerability in Cisco IOS 12.424MD before 12.424MD2 on the Cisco Content Services Gateway Second Generation aka CSG2 allows remote attackers to cause a denial of service device hang or reload via crafted TCP packets, aka Bug ID CSCth17178, a different vulnerability than CVE-2011-0350...

CVE-2010-1576

The Cisco Content Services Switch CSS 11500 with software before 8.20.4.02 and the Application Control Engine ACE 4710 with software before A23.0 do not properly handle use of LF, CR, and LFCR as alternatives to the standard CRLF sequence between HTTP headers, which allows remote attackers to...

CVE-2010-1575

The Cisco Content Services Switch CSS 11500 with software 08.20.1.01 conveys authentication data through ClientCert- headers but does not delete client-supplied ClientCert- headers, which might allow remote attackers to bypass authentication via crafted header data, as demonstrated by a...

Design/Logic Flaw

The Cisco Content Services Switch CSS 11500 with software 8.20.4.02 and the Application Control Engine ACE 4710 with software A23.0 do not properly handle LF header terminators in situations where the GET line is terminated by CRLF, which allows remote attackers to conduct HTTP request smuggling...

Crlf injection

The Cisco Content Services Switch CSS 11500 with software before 8.20.4.02 and the Application Control Engine ACE 4710 with software before A23.0 do not properly handle use of LF, CR, and LFCR as alternatives to the standard CRLF sequence between HTTP headers, which allows remote attackers to...