CVE-2006-3291: Undefined Security Weakness

The web interface on Cisco IOS 12.38JA and 12.38JA1, as used on the Cisco Wireless Access Point and Wireless Bridge, reconfigures itself when it is changed to use the "Local User List Only Individual Passwords" setting, which removes all security and password configurations and allows remote...

CVE-2006-1927

Cisco IOS XR, when configured for Multi Protocol Label Switching MPLS and running on Cisco CRS-1 or Cisco 12000 series routers, allows remote attackers to cause a denial of service Line card crash via certain MPLS packets, as identified by Cisco bug ID CSCsc77475...

CVE-2006-1928: Undefined Security Weakness

Cisco IOS XR, when configured for Multi Protocol Label Switching MPLS and running on Cisco CRS-1 routers, allows remote attackers to cause a denial of service Modular Services Cards MSC crash or "MPLS packet handling problems" via certain MPLS packets, as identified by Cisco bug IDs 1 CSCsd15970...

CVE-2006-1927: Undefined Security Weakness

Cisco IOS XR, when configured for Multi Protocol Label Switching MPLS and running on Cisco CRS-1 or Cisco 12000 series routers, allows remote attackers to cause a denial of service Line card crash via certain MPLS packets, as identified by Cisco bug ID CSCsc77475...

Update Protection against Cisco IOS HTTP Server Code Injection Vulnerability

The Cisco IOS Web browser interface which enables the device to perform as an HTTP server allows configuration and monitoring of a router or access server using any Web browser. A vulnerability exists in the IOS HTTP server in the CDP, a proprietary Cisco protocol used for exchanging information...

Cisco IOS AAA RADIUS Long Username Authentication Bypass (CSCee45312)

The remote host is a CISCO router containing a version of IOS that contains a faulty RADIUS implementation which may lead to an authentication bypass vulnerability. An attacker may exploit this problem to gain unauthorized access to the service. C Tenable Network Security, Inc. include"compat.inc...

Authorization

Certain Cisco IOS releases in 12.2S based trains with maintenance release number 25 and later, 12.3T based trains, and 12.4 based trains reuse a Tcl Shell process across login sessions of different local users on the same terminal if the first user does not use tclquit before exiting, which may...

Authorization

The TCL shell in Cisco IOS 12.214S before 12.214S16, 12.218S before 12.218S11, and certain other releases before 25 January 2006 does not perform Authentication, Authorization, and Accounting AAA command authorization checks, which may allow local users to execute IOS EXEC commands that were...

CVE-2006-0486

Certain Cisco IOS releases in 12.2S based trains with maintenance release number 25 and later, 12.3T based trains, and 12.4 based trains reuse a Tcl Shell process across login sessions of different local users on the same terminal if the first user does not use tclquit before exiting, which may...

CVE-2006-0485

CVE-2006-0485 affects Cisco IOS TCL/CLI: the TCL shell does not perform AAA command authorization checks, potentially allowing local users to bypass AAA and execute IOS EXEC commands prohibited by configuration (Bug CSCeh73049). Affected Cisco IOS versions include 12.2(14)S before 12.2(14)S16 and...

CVE-2006-0485

The TCL shell in Cisco IOS 12.214S before 12.214S16, 12.218S before 12.218S11, and certain other releases before 25 January 2006 does not perform Authentication, Authorization, and Accounting AAA command authorization checks, which may allow local users to execute IOS EXEC commands that were...

CVE-2006-0486

Certain Cisco IOS releases in 12.2S based trains with maintenance release number 25 and later, 12.3T based trains, and 12.4 based trains reuse a Tcl Shell process across login sessions of different local users on the same terminal if the first user does not use tclquit before exiting, which may...

CVE-2006-0485: Undefined Security Weakness

The TCL shell in Cisco IOS 12.214S before 12.214S16, 12.218S before 12.218S11, and certain other releases before 25 January 2006 does not perform Authentication, Authorization, and Accounting AAA command authorization checks, which may allow local users to execute IOS EXEC commands that were...

CVE-2006-0486: Undefined Security Weakness

Certain Cisco IOS releases in 12.2S based trains with maintenance release number 25 and later, 12.3T based trains, and 12.4 based trains reuse a Tcl Shell process across login sessions of different local users on the same terminal if the first user does not use tclquit before exiting, which may...

[SA18613] Cisco IOS AAA Command Authentication Bypass Vulnerability

TITLE: Cisco IOS AAA Command Authentication Bypass Vulnerability SECUNIA ADVISORY ID: SA18613 VERIFY ADVISORY: http://secunia.com/advisories/18613/ CRITICAL: Less critical IMPACT: Security Bypass WHERE: Local system OPERATING SYSTEM: Cisco IOS R12.x http://secunia.com/product/50/ Cisco IOS 12.x...

CVE-2006-0354: Undefined Security Weakness

Cisco IOS before 12.3-7-JA2 on Aironet Wireless Access Points WAP allows remote authenticated users to cause a denial of service termination of packet passing or termination of client connections by sending the management interface a large number of spoofed ARP packets, which creates a large ARP...

Sql injection

Unspecified vulnerability in Stack Group Bidding Protocol SGBP support in Cisco IOS 12.0 through 12.4 running on various Cisco products, when SGBP is enabled, allows remote attackers on the local network to cause a denial of service device hang and network traffic loss via a crafted UDP packet to...

CVE-2006-0340: Improper Input Validation

Unspecified vulnerability in Stack Group Bidding Protocol SGBP support in Cisco IOS 12.0 through 12.4 running on various Cisco products, when SGBP is enabled, allows remote attackers on the local network to cause a denial of service device hang and network traffic loss via a crafted UDP packet to...

CVE-2005-4826

Unspecified vulnerability in the VLAN Trunking Protocol VTP feature in Cisco IOS 12.122EA3 on Catalyst 2950T switches allows remote attackers to cause a denial of service device reboot via a crafted Subset-Advert message packet, a different issue than CVE-2006-4774, CVE-2006-4775, and CVE-2006-47...

CVE-2005-4437

CVE-2005-4437 describes a vulnerability in Extended Interior Gateway Routing Protocol (EIGRP) 1.2 as implemented in Cisco IOS 11.3 and later, where the MD5 neighbor authentication does not include the Message Authentication Code (MAC) in the checksum. This enables remote attackers to sniff messag...