Cisco Security Advisory: Cisco IOS cTCP Denial of Service Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco IOS cTCP Denial of Service Vulnerability Advisory ID: cisco-sa-20090325-ctcp http://www.cisco.com/warp/public/707/cisco-sa-20090325-ctcp.shtml Revision 1.0 For Public Release 2009 March 25 1600 UTC GMT -...

Cisco Security Advisory: Cisco IOS Software Secure Copy Privilege Escalation Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco IOS Software Secure Copy Privilege Escalation Vulnerability Advisory ID: cisco-sa-20090325-scp http://www.cisco.com/warp/public/707/cisco-sa-20090325-scp.shtml Revision 1.0 For Public Release 2009 March 25 1600 UTC GMT -...

Cisco Security Advisory: Cisco IOS Software Multiple Features Crafted TCP Sequence Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco IOS Software Multiple Features Crafted TCP Sequence Vulnerability Advisory ID: cisco-sa-20090325-tcp http://www.cisco.com/warp/public/707/cisco-sa-20090325-tcp.shtml Revision 1.0 For Public Release 2009 March 25 1600 UTC...

Cisco IOS Software Mobile IP and Mobile IPv6 Vulnerabilities

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

Cisco IOS Software Session Initiation Protocol Denial of Service Vulnerability

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

Cisco IOS Software Secure Copy Privilege Escalation Vulnerability

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

Cisco IOS cTCP Denial of Service Vulnerability

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

CVE-2009-0471

Cross-site request forgery CSRF vulnerability in the HTTP server in Cisco IOS 12.423 allows remote attackers to execute arbitrary commands, as demonstrated by executing the hostname command with a level/15/configure/-/hostname request...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the HTTP server in Cisco IOS 12.423 allows remote attackers to execute arbitrary commands, as demonstrated by executing the hostname command with a level/15/configure/-/hostname request...

CVE-2009-0471

CVE-2009-0471 describes a CSRF vulnerability in Cisco IOS 12.4(23) where the HTTP server can be coerced into executing arbitrary commands via crafted requests (demonstrated by a hostname command in a level/15/configure/-/hostname path). The issue arises from the HTTP server handling cross-site re...

CVE-2009-0470

Multiple cross-site scripting XSS vulnerabilities in the HTTP server in Cisco IOS 12.423 allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to the default URI under 1 level/15/exec/-/ or 2 exec/, a different vulnerability than CVE-2008-3821...

Cisco IOS XSS/CSRF Vulnerability

There was a Cisco Product Security Incident Response Team PSIRT advisory recently concerning some XSS/CSRF holes in the IOS.. Cisco IOS Software versions 11.0 through 12.4 with the HTTP server enabled. http://www.cisco.com/warp/public/707/cisco-sr-20090114-http.shtml furchtbarsh ver | i IOS Cisco...

CVE-2009-0471: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the HTTP server in Cisco IOS 12.423 allows remote attackers to execute arbitrary commands, as demonstrated by executing the hostname command with a level/15/configure/-/hostname request...

CVE-2009-0470: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the HTTP server in Cisco IOS 12.423 allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to the default URI under 1 level/15/exec/-/ or 2 exec/, a different vulnerability than CVE-2008-3821...

Cisco IOS crossite scripting

Crossite scripting in different scripts...

Cisco IOS 12.4(23) - HTTP Server Multiple Cross-Site Scripting Vulnerabilities

Cisco IOS 12.423 - HTTP Server Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/33625/info Cisco IOS HTTP Server is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage the...

CVE-2008-3821

Multiple cross-site scripting XSS vulnerabilities in the HTTP server in Cisco IOS 11.0 through 12.4 allow remote attackers to inject arbitrary web script or HTML via 1 the query string to the ping program or 2 unspecified other aspects of the URI...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the HTTP server in Cisco IOS 11.0 through 12.4 allow remote attackers to inject arbitrary web script or HTML via 1 the query string to the ping program or 2 unspecified other aspects of the URI...

CVE-2008-3821

Cisco IOS HTTP server (Cisco IOS 11.0–12.4) contains cross-site scripting (XSS) and related flaws that allow remote attackers to inject arbitrary web script or HTML via the URI, notably the query string to the ping program (and potentially other URI aspects). The linked Cisco advisory (June 19, 2...

CVE-2008-3821: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the HTTP server in Cisco IOS 11.0 through 12.4 allow remote attackers to inject arbitrary web script or HTML via 1 the query string to the ping program or 2 unspecified other aspects of the URI...