CISCO IOS 12.1.4 Security Hole

Hi there, today I upgraded my cisco 1003 to IOS 12.14. The funny thing is that my accesslist on the BRI is no longer working. Take a look at the config and see for yourself : interface BRI0 ip unnumbered Ethernet0 ip access-group 101 in no ip redirects no ip proxy-arp encapsulation ppp no logging...

Cisco Security Advisory: Possible Access Control Bypass and Denial of Service in Gigabit Switch Routers Using Gigabit Ethernet or Fast Ethernet Cards

-----BEGIN PGP SIGNED MESSAGE----- Cisco Security Advisory Possible Access Control Bypass and Denial of Service in Gigabit Switch Routers Using Gigabit Ethernet or Fast Ethernet Cards Revision 1.0 For Public Release 2000 August 03 at 11:00 AM US/Eastern UTC+0400 Summary A defect in Cisco IOStm...

CVE-2000-0380

The IOS HTTP service in Cisco routers and switches running IOS 11.1 through 12.1 allows remote attackers to cause a denial of service by requesting a URL that contains a %% string...

CVE-2000-0268

Cisco IOS 11.x and 12.x allows remote attackers to cause a denial of service by sending the ENVIRON option to the Telnet daemon before it is ready to accept it, which causes the system to reboot...

И еще одна дырка в Cisco IOS

При открытии 98 одновременных telnet-соединений маршрутизатор перезагружается из-за критической ошибки...

cisco.00-05-14.http

-----BEGIN PGP SIGNED MESSAGE----- Cisco IOS HTTP Server Vulnerability Revision 1.0 For public release 2000 May 14 at 09:00 US/Eastern UTC+0400 ------------------------------------------------------------------------ Summary A defect in multiple releases of Cisco IOS software will cause a Cisco...

Security Advisory: Cisco IOS HTTP Server Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Cisco IOS HTTP Server Vulnerability Revision 1.0 For public release 2000 May 14 at 09:00 US/Eastern UTC+0400 ------------------------------------------------------------------------ Summary A defect in multiple releases of Cisco IOS software will cause a Cisco...

Еще одна ошибка в Cisco IOS

При включенном http сервере возможна удаленная DoS-атака используя URL http://router-ip/...

Cisco IOS HTTP Server Vulnerability

...

И еще одна проблема в Cisco IOS

По команде show в не-enable режиме тем не менее доступны многие команды, документированные как команды enable-режима, например show access-list...

CVE-2000-0380

The IOS HTTP service in Cisco routers and switches running IOS 11.1 through 12.1 allows remote attackers to cause a denial of service by requesting a URL that contains a %% string...

Cisco IOS 11.x/12.x - HTTP %%

source: https://www.securityfocus.com/bid/1154/info A denial of service attack exists in versions of Cisco IOS, running on a variety of different router hardware. If the router is configured to have a web server running for configuration and other information a user can cause the router to crash...

Cisco IOS 11.x12.x - HTTP %%

Cisco IOS 11.x12.x - HTTP %% source: https://www.securityfocus.com/bid/1154/info A denial of service attack exists in versions of Cisco IOS, running on a variety of different router hardware. If the router is configured to have a web server running for configuration and other information a user c...

Security Advisory: Cisco IOS Software TELNET Option Handling Vulnerability

Cisco IOS Software TELNET Option Handling Vulnerability Revision 1.0 For public release Thursday 2000/04/20 at 09:00 AM US/Eastern UTC-0400. --------------------------------------------------------------------------- Summary ======= A defect in multiple Cisco IOS software versions will cause a...

Cisco IOS Software TELNET Option Handling Vulnerability

...

CVE-2000-0268

Cisco IOS 11.x and 12.x allows remote attackers to cause a denial of service by sending the ENVIRON option to the Telnet daemon before it is ready to accept it, which causes the system to reboot...

CVE-1999-0222

Denial of service in Cisco IOS web server allows attackers to reboot the router using a long URL...

CVE-1999-0222

The CVE-1999-0222 entry concerns Cisco IOS web server denial of service, where a attacker-supplied long URL can cause the router to reboot. Affected software is Cisco IOS web server (Cisco IOS), with the vulnerability described as a DoS via a long URL that leads to a reboot. The connected Red Hat...

CVE-1999-1465

Vulnerability in Cisco IOS 11.1 through 11.3 with distributed fast switching DFS enabled allows remote attackers to bypass certain access control lists when the router switches traffic from a DFS-enabled input interface to an output interface with a logical subinterface, as described by Cisco bug...

CVE-1999-1464

Vulnerability in Cisco IOS 11.1CC and 11.1CT with distributed fast switching DFS enabled allows remote attackers to bypass certain access control lists when the router switches traffic from a DFS-enabled interface to an interface that does not have DFS enabled, as described by Cisco bug CSCdk3556...