CVE-2005-4436

The CVE-2005-4436 entry concerns Extended Interior Gateway Routing Protocol (EIGRP) v1.2, implemented in Cisco IOS (post 12.3(2), 12.3(3)B, 12.3(2)T) and related products. A remote attacker can cause a denial-of-service by sending a spoofed neighbor announcement that uses (1) mismatched k values ...

CVE-2005-4437

MD5 Neighbor Authentication in Extended Interior Gateway Routing Protocol EIGRP 1.2, as implemented in Cisco IOS 11.3 and later, does not include the Message Authentication Code MAC in the checksum, which allows remote attackers to sniff message hashes and 1 replay EIGRP HELLO messages or 2 cause...

CVE-2005-4437

CVE-2005-4437 describes a vulnerability in Extended Interior Gateway Routing Protocol (EIGRP) 1.2 as implemented in Cisco IOS 11.3 and later, where the MD5 neighbor authentication does not include the Message Authentication Code (MAC) in the checksum. This enables remote attackers to sniff messag...

Cisco IOS HTTP server crossite scripting

There is no characters filtering on memory buffers displaying...

Telnet Banner Reporting

This scripts reports the received banner of a Telnet service. SPDX-FileCopyrightText: 2005 SecuriTeam SPDX-FileCopyrightText: Reworked, improved and extended detection code and pattern since 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C...

Cisco IOS System Timers Remote Overflow (CSCei61732)

The remote host is a CISCO router containing a version of IOS that is vulnerable to a heap overflow attack. An attacker may exploit this flaw to crash the remote device or to execute arbitrary code remotely. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid20134;...

Cisco IOS heap integrity checks are insufficient

Overview Cisco Internetwork Operating System IOS may allow a heap-based buffer overflow vulnerability to execute arbitrary code after bypassing heap integrity checks. Description Cisco IOS contains functionality for checking the integrity of the heap, which is a specific region in memory where da...

Cisco Security Advisory: IOS Heap-based Overflow Vulnerability in System Timers

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: ======================== IOS Heap-based Overflow Vulnerability in System Timers ====================================================== Document ID: 68064 Revision 1.0 For Public Release 2005 November 2 1600 UTC GMT -...

TFTP File Detection (Cisco IOS) - Active Check

The remote host has a TFTP server installed that is serving one or more sensitive Cisco IOS files. SPDX-FileCopyrightText: 2005 Corsaire Limited Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

TFTP File Detection (Cisco IOS CA) - Active Check

The remote host has a TFTP server installed that is serving one or more sensitive Cisco IOS Certificate Authority CA files. SPDX-FileCopyrightText: 2005 Corsaire Limited Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

CVE-2005-3427

The Cisco Management Center MC for IPS Sensors IPS MC 2.1 can omit port field values while generating the Cisco IOS IPS configuration file, wich can cause some signatures to be disabled and makes it easier for attackers to escape detection...

CVE-2005-2841

Buffer overflow in Firewall Authentication Proxy for FTP and/or Telnet Sessions for Cisco IOS 12.2ZH and 12.2ZL, 12.3 and 12.3T, and 12.4 and 12.4T allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted user authentication credentials...

CVE-2005-2841

The CVE-2005-2841 issue targets Cisco IOS Firewall Authentication Proxy for FTP and/or Telnet Sessions. A buffer overflow in this feature on specific IOS releases (12.2ZH/12.2ZL, 12.3/12.3T, 12.4/12.4T) allows remote attackers to cause a denial of service and potentially execute arbitrary code vi...

Cisco IOS VPN Detection

Binary data 2924.prm...

CVE-2005-1020

Secure Shell SSH 2 in Cisco IOS 12.0 through 12.3 allows remote attackers to cause a denial of service device reload 1 via a username that contains a domain name when using a TACACS+ server to authenticate, 2 when a new SSH session is in the login phase and a currently logged in user issues a sen...

CVE-2005-0195

Cisco IOS 12.0S through 12.3YH allows remote attackers to cause a denial of service device restart via a crafted IPv6 packet...

CVE-2001-1434

Cisco IOS 12.05XU through 12.12 allows remote attackers to read system administration and topology information via an "snmp-server host" command, which creates a readable "community" community string if one has not been previously created...

CVE-2005-1020

Secure Shell SSH 2 in Cisco IOS 12.0 through 12.3 allows remote attackers to cause a denial of service device reload 1 via a username that contains a domain name when using a TACACS+ server to authenticate, 2 when a new SSH session is in the login phase and a currently logged in user issues a sen...

CVE-2005-1021

CVE-2005-1021 concerns a memory leak in Cisco IOS SSH when TACACS+ is used for authentication (IOS 12.0–12.3). The vulnerability can permit remote attackers to cause denial of service via memory exhaustion during login. Related references describe two DoS variants for Cisco IOS SSH with TACACS+ a...

Cisco Security Advisory: Vulnerabilities in Cisco IOS Secure Shell Server

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: ======================= Vulnerabilities in Cisco IOS Secure Shell Server ================================================ Revision 1.0 For Public Release 2005 April 06 1600 UTC GMT -...