CVE-2007-5547

Cisco IOS is reported to have a cross-site scripting (XSS) vulnerability (CVE-2007-5547) that allows remote attackers to inject arbitrary web script or HTML and to execute IOS commands via unspecified vectors. The affected product is Cisco IOS; the underlying root cause and precise exploitation v...

CVE-2002-2239

The Cisco Optical Service Module (OSM) in Catalyst 6500/7600 chassis with IOS 12.1(8)E–12.1(13.4)E is affected. A malformed-packet can be sent remotely to cause a denial of service (hang) via the OSM, as documented in multiple sources (OSM LC IOS vulnerability). The issue originates from how spec...

Stack overflow

Rejected reason: Multiple stack-based buffer overflows in Cisco IOS 12.x and IOS XR allow attackers to execute arbitrary code, as demonstrated via the "Bind Shell", "Reverse Shell", and "Two byte rootshell Tiny Shell" attacks. NOTE: the vendor and researcher agree that this issue does not cross...

CVE-2007-5421

Rejected reason: Multiple stack-based buffer overflows in Cisco IOS 12.x and IOS XR allow attackers to execute arbitrary code, as demonstrated via the "Bind Shell", "Reverse Shell", and "Two byte rootshell Tiny Shell" attacks. NOTE: the vendor and researcher agree that this issue does not cross...

Stack overflow

Stack-based buffer overflow in the Line Printer Daemon LPD in Cisco IOS before 12.218SXF11, 12.416a, and 12.42T6 allow remote attackers to execute arbitrary code by setting a long hostname on the target system, then causing an error message to be printed, as demonstrated by a telnet session to th...

CVE-2007-5381

Stack-based buffer overflow in the Line Printer Daemon LPD in Cisco IOS before 12.218SXF11, 12.416a, and 12.42T6 allow remote attackers to execute arbitrary code by setting a long hostname on the target system, then causing an error message to be printed, as demonstrated by a telnet session to th...

IRM Advisory: Cisco IOS LPD Remote Stack Overflow

---------------------------------------------------------------------- IRM Security Advisory 024 Cisco IOS LPD Remote Stack Overflow Vulnerability Type / Importance: Remote Code Execution / High Problem Discovered: 30 July 2007 Vendor Contacted: 30 July 2007 Advisory Published: 10 October 2007...

Cisco IOS 12.3 - 'LPD' Remote Buffer Overflow

source: https://www.securityfocus.com/bid/26001/info Cisco IOS is prone to a remote buffer-overflow vulnerability in its LPD service because it fails to perform adequate boundary checks on user-supplied data. Attackers can exploit this issue to execute arbitrary code in the context of the affecte...

Cisco IOS on Catalyst 6500 and Cisco 7600 Access Control List Bypass Vulnerability

Cisco IOS running on Catalyst 6500 and Cisco 7600 contains a vulnerability that could allow an unauthenticated, remote attacker to bypass configured ACLs. The vulnerability exists because the affected devices accept traffic to IP addresses that are reserved for use by the Ethernet Out-of-Band...

Cisco IOS HTTP GET /%% Request Denial of Service

This module triggers a Denial of Service condition in the Cisco IOS HTTP server. By sending a GET request for "/%%", the device becomes unresponsive. IOS 11.1 - 12.1 are reportedly vulnerable. This module tested successfully against a Cisco 1600 Router IOS v11.218P. This module requires Metasploi...

CVE-2007-4632

Cisco IOS 12.2E, 12.2F, and 12.2S places a "no login" line into the VTY configuration when an administrator makes certain changes to a 1 VTY/AUX or 2 CONSOLE setting on a device without AAA enabled, which allows remote attackers to bypass authentication and obtain a terminal session, a different...

CVE-2007-4430

Unspecified vulnerability in Cisco IOS 12.0 through 12.4 allows context-dependent attackers to cause a denial of service device restart and BGP routing table rebuild via certain regular expressions in a "show ip bgp regexp" command. NOTE: unauthenticated remote attacks are possible in environment...

Cisco IOS Show IP BGP Regexp远程拒绝服务漏洞

Cisco IOS是一款流行的网络操作系统。 Cisco IOS不正确处理部分CLI命令，远程攻击者可以利用漏洞对系统进行拒绝服务攻击，可导致设备重启。 问题存在于处理"show ip bgp regexp"命令时，如果提交部分规则表达式作为参数并执行，结果可导致路由器重启或重建BGP路由表。如果多次成功利用此问题，可导致路由器变的重复不可用。 Cisco IOS XR 3.4.1 Cisco IOS XR 3.4 Cisco IOS XR 3.3.4 Cisco IOS XR 3.3.3 Cisco IOS XR 3.3.2 Cisco IOS XR 3.3.1 Cisco IOS X...

Cisco IOS 12.3 - Show IP BGP Regexp Remote Denial of Service

Cisco IOS 12.3 - Show IP BGP Regexp Remote Denial of Service source: https://www.securityfocus.com/bid/25352/info Cisco IOS is prone to a remote denial-of-service vulnerability because the software fails to properly handle certain CLI commands. To issue commands that trigger this vulnerability,...

nhrp-dos.txt

Hi, this exploit/DoS addresses the recent NHRP bug in Cisco IOS CSCin95836 / cisco-sa-20070808-nhrp. The original advisory can be found here: http://www.cisco.com/en/US/products/productssecurityadvisory09186a008089963b.shtml Exploit/DoS: // / / / nhrp-dos - Copyright by Martin Kluge, / / / / Feel...

CVE-2007-4286

Buffer overflow in the Next Hop Resolution Protocol NHRP functionality in Cisco IOS 12.0 through 12.4 allows remote attackers to cause a denial of service restart and execute arbitrary code via a crafted NHRP packet...

CVE-2007-4285

Unspecified vulnerability in Cisco IOS and Cisco IOS XR 12.x up to 12.3, including some versions before 12.315 and 12.314T, allows remote attackers to obtain sensitive information partial packet contents or cause a denial of service router or component crash via crafted IPv6 packets with a Type 0...

CVE-2007-4292

Multiple memory leaks in Cisco IOS 12.0 through 12.4 allow remote attackers to cause a denial of service device crash via a malformed SIP packet, aka 1 CSCsf11855, 2 CSCeb21064, 3 CSCse40276, 4 CSCse68355, 5 CSCsf30058, 6 CSCsb24007, and 7 CSCsc60249...

Code injection

Multiple memory leaks in Cisco IOS 12.0 through 12.4 allow remote attackers to cause a denial of service device crash via a malformed SIP packet, aka 1 CSCsf11855, 2 CSCeb21064, 3 CSCse40276, 4 CSCse68355, 5 CSCsf30058, 6 CSCsb24007, and 7 CSCsc60249...

Buffer overflow

Buffer overflow in the Next Hop Resolution Protocol NHRP functionality in Cisco IOS 12.0 through 12.4 allows remote attackers to cause a denial of service restart and execute arbitrary code via a crafted NHRP packet...