Operating System (OS) Detection (Telnet)

Telnet banner based Operating System OS detection. SPDX-FileCopyrightText: 2015 SCHUTZWERK GmbH SPDX-FileCopyrightText: Reworked, improved and extended detection code and pattern since 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by th...

CVE-2015-6383: Undefined Security Weakness

Cisco IOS XE 15.43S on ASR 1000 devices improperly loads software packages, which allows local users to bypass license restrictions and obtain certain root privileges by using the CLI to enter crafted filenames, aka Bug ID CSCuv93130...

Design/Logic Flaw

The publish-event event-manager feature in Cisco IOS 15.52S and 15.53S on Cloud Services Router 1000V devices allows local users to execute arbitrary commands with root privileges by leveraging administrative access to enter crafted environment variables, aka Bug ID CSCux14943...

CVE-2015-6385: Improper Input Validation

The publish-event event-manager feature in Cisco IOS 15.52S and 15.53S on Cloud Services Router 1000V devices allows local users to execute arbitrary commands with root privileges by leveraging administrative access to enter crafted environment variables, aka Bug ID CSCux14943...

PT-2015-7215

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 15.52S through 15.53S Description The issue allows local users to execute arbitrary commands with root privileges by leveraging administrative access to enter crafted environment variables. Recommendations For Cisco IOS...

Cisco Cloud Services Router 1000V Command Injection Vulnerability (cisco-sa-20151130-csr)

A vulnerability in the event manager environment and publish-event function of the Cisco Cloud Services Router 1000V Series could allow an authenticated, local attacker to perform a command injection attack with root-level privileges. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptio...

Cisco IOS XE 3S Platforms Series root Shell License Bypass Vulnerability

A vulnerability in one of the diagnostic commands in the Cisco IOS XE operating system for Cisco IOS XE 3S platforms could allow an authenticated, privileged, local attacker to gain restricted root shell access. The root shell is provided for advanced troubleshooting with Cisco Technical Assistan...

PT-2015-7213

Name of the Vulnerable Software and Affected Versions Cisco IOS XE versions 15.43S and 3S Description A local user can bypass license restrictions and obtain certain root privileges by using the CLI to enter crafted filenames. The vulnerability occurs because parameters to diagnostic commands at...

PT-2015-7208

Name of the Vulnerable Software and Affected Versions Cisco IOS version 15.22E3 Description The issue allows local users to obtain sensitive information by reading an unspecified file due to the debug-logging feature in Cisco Networking Services CNS for IOS. Recommendations For Cisco IOS version...

Cisco IOS Virtual PPP Interfaces Security Bypass

The remote Cisco device is affected by a security bypass vulnerability due to physical-interface ACLs superseding virtual PPP interface ACLs. An authenticated, remote attacker connected to an authenticated PPP session can exploit this to bypass intended network-traffic restrictions. C Tenable...

Cisco IOS ACL控制绕过漏洞

No description provided by source...

Cisco IOS Virtual PPP ACL控制绕过漏洞

No description provided by source...

Design/Logic Flaw

Cisco IOS 15.204M and 15.403M lets physical-interface ACLs supersede virtual PPP interface ACLs, which allows remote authenticated users to bypass intended network-traffic restrictions in opportunistic circumstances by using PPP, aka Bug ID CSCur61303...

CVE-2015-6365

Cisco IOS Software CVE-2015-6365 affects IOS releases 15.2(04)M and 15.4(03)M, where physical-interface ACLs can supersede virtual PPP interface ACLs. This allows an authenticated remote user connected to a PPP session to bypass ACLs on virtual PPP interfaces and potentially pass traffic that sho...

CVE-2015-6365: Improper Input Validation

Cisco IOS 15.204M and 15.403M lets physical-interface ACLs supersede virtual PPP interface ACLs, which allows remote authenticated users to bypass intended network-traffic restrictions in opportunistic circumstances by using PPP, aka Bug ID CSCur61303...

CVE-2015-6366: Improper Access Control

Cisco IOS 15.204M6 and 15.403S lets physical-interface ACLs supersede tunnel-interface ACLs, which allows remote attackers to bypass intended network-traffic restrictions in opportunistic circumstances by using a tunnel, aka Bug ID CSCur01042...

PT-2015-7206

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 15.204M through 15.403M Description A vulnerability in Cisco devices running Cisco IOS Software allows remote authenticated users to bypass intended network-traffic restrictions by using PPP. This issue arises because...

PT-2015-2671

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 15.204M6 through 15.403S Description The issue is related to deficiencies in the access control list management procedure in Cisco IOS. It allows a remote attacker to bypass network traffic access restrictions by utilizing...

CVE-2015-6343: Undefined Security Weakness

The SIP implementation in Cisco IOS 15.53M on Cisco Unified Border Element CUBE devices allows remote attackers to cause a denial of service via crafted SIP messages, aka Bug ID CSCuv79202...

PT-2015-7192

Name of the Vulnerable Software and Affected Versions Cisco IOS version 15.53M Description The SIP implementation allows remote attackers to cause a denial of service via crafted SIP messages. Recommendations For Cisco IOS version 15.53M, update to a version that fixes the issue, as the current...