4862 matches found
Cisco IOS 11.x/12.x HTTP Configuration Arbitrary Administrative Access Vulnerability (2)
No description provided by source. source: http://www.securityfocus.com/bid/2936/info IOS is router firmware developed and distributed by Cisco Systems. IOS functions on numerous Cisco devices, including routers and switches. It is possible to gain full remote administrative access on devices usi...
Cain & Abel 4.9.25 (Cisco IOS-MD5) Local Buffer Overflow Exploit
No description provided by source. !perl -w Simple overflow for Cain & Abel v4.9.25 and below? This script will output a file; import this file as a config file under Cracker - Cisco IOS-MD5 Hashes If Cain crashes but calc.exe isn't run, change $eip to reflect your system. send9 /at/ chiseclabs.c...
Cisco IOS 11.x/12.x HTTP %% Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1154/info A denial of service attack exists in versions of Cisco IOS, running on a variety of different router hardware. If the router is configured to have a web server running for configuration and other information a...
FreeBSD 2.x,HP-UX 9/10/11,kernel 2.0.3,Windows NT 4.0/Server 2003,NetBSD 1 loopback (land.c) DoS (5)
No description provided by source. source: http://www.securityfocus.com/bid/2666/info A number of TCP/IP stacks are vulnerable to a loopback condition initiated by sending a TCP SYN packet with the source address and port spoofed to equal the destination source and port. When a packet of this sor...
Cisco IOS 11/12 OSPF Neighbor Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/6895/info Cisco IOS is prone to a remotely exploitable buffer overflow condition when handling malformed OSPF Open Shortest Path First packets. The overflow occurs when more than 255 OSPF neighbors are announced. This may...
Cisco IOS 12.4(23) HTTP Server Multiple Cross Site Scripting Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/33625/info Cisco IOS HTTP Server is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code ...
Cisco IOS 11.x/12.x HTTP Configuration Arbitrary Administrative Access Vulnerability (1)
No description provided by source. source: http://www.securityfocus.com/bid/2936/info IOS is router firmware developed and distributed by Cisco Systems. IOS functions on numerous Cisco devices, including routers and switches. It is possible to gain full remote administrative access on devices usi...
FreeBSD 2.x,HP-UX 9/10/11,kernel 2.0.3,Windows NT 4.0/Server 2003,NetBSD 1 loopback (land.c) DoS (4)
No description provided by source. source: http://www.securityfocus.com/bid/2666/info A number of TCP/IP stacks are vulnerable to a loopback condition initiated by sending a TCP SYN packet with the source address and port spoofed to equal the destination source and port. When a packet of this sor...
Cisco AS5350 Universal Gateway Portscan Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/6059/info The Cisco AS5350 Universal Gateway is reported to be prone to a denial of service condition. It is possible to cause this condition by portscanning a vulnerable device. This issue was reported for Cisco AS5350...
Cisco IOS XR Software IPv6 Malformed Packet DoS (cisco-sa-20140611-ipv6)
According to its self-reported version, the version of Cisco IOS XR running on the remote host is affected by a denial of service vulnerability due to the improper handling of IPv6 packets. A remote, unauthenticated attacker can cause the device to lock up by rapidly sending specially crafted IPv...
CVE-2014-3299
Cisco IOS allows remote authenticated users to cause a denial of service device reload via malformed IPsec packets, aka Bug ID CSCui79745...
Code injection
Cisco IOS allows remote authenticated users to cause a denial of service device reload via malformed IPsec packets, aka Bug ID CSCui79745...
CVE-2014-3299
Cisco IOS allows remote authenticated users to cause a denial of service device reload via malformed IPsec packets, aka Bug ID CSCui79745...
CVE-2014-3290
CVE-2014-3290 concerns Cisco IOS XE Software with Autonomic Networking Infrastructure. The mDNS implementation, used for autonomic networking, can be manipulated due to unconstrained mDNS interactions, allowing an unauthenticated, adjacent attacker to read or overwrite autonomic-networking servic...
CVE-2014-3290
The mDNS implementation in Cisco IOS XE 3.12S does not properly interact with autonomic networking, which allows remote attackers to obtain sensitive networking-services information by sniffing the network or overwrite networking-services data via a crafted mDNS response, aka Bug ID CSCun64867...
Cisco IOS XR DoS
DoS via IPv6 packet...
Code injection
Cisco IOS XE on ASR1000 devices, when PPPoE termination is enabled, allows remote attackers to cause a denial of service device reload via a malformed PPPoE packet, aka Bug ID CSCuo55180...
Code injection
The LLDP implementation in Cisco IOS allows remote attackers to cause a denial of service device reload via a malformed packet, aka Bug ID CSCum96282...