CVE-2005-4437

MD5 Neighbor Authentication in Extended Interior Gateway Routing Protocol EIGRP 1.2, as implemented in Cisco IOS 11.3 and later, does not include the Message Authentication Code MAC in the checksum, which allows remote attackers to sniff message hashes and 1 replay EIGRP HELLO messages or 2 cause...

CVE-2002-2208

Extended Interior Gateway Routing Protocol EIGRP, as implemented in Cisco IOS 11.3 through 12.2 and other products, allows remote attackers to cause a denial of service flood by sending a large number of spoofed EIGRP neighbor announcements, which results in an ARP storm on the local network...

CVE-2002-2208

CVE-2002-2208 affects Cisco IOS (11.3–12.2) and related products. It allows remote attackers to cause a denial of service by sending a large number of spoofed EIGRP neighbor announcements, triggering an ARP storm on the local network. The issue is tied to the EIGRP implementation; Cisco issued a ...

CVE-2005-4436

The CVE-2005-4436 entry concerns Extended Interior Gateway Routing Protocol (EIGRP) v1.2, implemented in Cisco IOS (post 12.3(2), 12.3(3)B, 12.3(2)T) and related products. A remote attacker can cause a denial-of-service by sending a spoofed neighbor announcement that uses (1) mismatched k values ...

CVE-2005-4437: Undefined Security Weakness

MD5 Neighbor Authentication in Extended Interior Gateway Routing Protocol EIGRP 1.2, as implemented in Cisco IOS 11.3 and later, does not include the Message Authentication Code MAC in the checksum, which allows remote attackers to sniff message hashes and 1 replay EIGRP HELLO messages or 2 cause...

CVE-2005-4436: Undefined Security Weakness

Extended Interior Gateway Routing Protocol EIGRP 1.2, as implemented in Cisco IOS after 12.32, 12.33B, and 12.32T and other products, allows remote attackers to cause a denial of service by sending a "spoofed neighbor announcement" with 1 mismatched k values or 2 "goodbye message" Type-Length-Val...

CVE-2002-2208: Undefined Security Weakness

Extended Interior Gateway Routing Protocol EIGRP, as implemented in Cisco IOS 11.3 through 12.2 and other products, allows remote attackers to cause a denial of service flood by sending a large number of spoofed EIGRP neighbor announcements, which results in an ARP storm on the local network...

Cisco IOS HTTP server crossite scripting

There is no characters filtering on memory buffers displaying...

CVE-2005-3921: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Cisco IOS Web Server for IOS 12.02a allows remote attackers to inject arbitrary web script or HTML by 1 packets containing HTML that an administrator views via an HTTP interface to the contents of memory buffers, as demonstrated by the URI...

Cisco Security Advisory: IOS Heap-based Overflow Vulnerability in System Timers

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: ======================== IOS Heap-based Overflow Vulnerability in System Timers ====================================================== Document ID: 68064 Revision 1.0 For Public Release 2005 November 2 1600 UTC GMT -...

CVE-2005-3481: Undefined Security Weakness

Cisco IOS 12.0 to 12.4 might allow remote attackers to execute arbitrary code via a heap-based buffer overflow in system timers. NOTE: this issue does not correspond to a specific vulnerability, rather a general weakness that only increases the feasibility of exploitation of any vulnerabilities...

TFTP File Detection (Cisco IOS) - Active Check

The remote host has a TFTP server installed that is serving one or more sensitive Cisco IOS files. SPDX-FileCopyrightText: 2005 Corsaire Limited Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

TFTP File Detection (Cisco IOS CA) - Active Check

The remote host has a TFTP server installed that is serving one or more sensitive Cisco IOS Certificate Authority CA files. SPDX-FileCopyrightText: 2005 Corsaire Limited Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Telnet Banner Reporting

This scripts reports the received banner of a Telnet service. SPDX-FileCopyrightText: 2005 SecuriTeam SPDX-FileCopyrightText: Reworked, improved and extended detection code and pattern since 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C...

Cisco IOS System Timers Remote Overflow (CSCei61732)

The remote host is a CISCO router containing a version of IOS that is vulnerable to a heap overflow attack. An attacker may exploit this flaw to crash the remote device or to execute arbitrary code remotely. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid20134;...

Cisco IOS heap integrity checks are insufficient

Overview Cisco Internetwork Operating System IOS may allow a heap-based buffer overflow vulnerability to execute arbitrary code after bypassing heap integrity checks. Description Cisco IOS contains functionality for checking the integrity of the heap, which is a specific region in memory where da...

CVE-2005-3427

The Cisco Management Center MC for IPS Sensors IPS MC 2.1 can omit port field values while generating the Cisco IOS IPS configuration file, wich can cause some signatures to be disabled and makes it easier for attackers to escape detection...

CVE-2005-2841

Buffer overflow in Firewall Authentication Proxy for FTP and/or Telnet Sessions for Cisco IOS 12.2ZH and 12.2ZL, 12.3 and 12.3T, and 12.4 and 12.4T allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted user authentication credentials...

CVE-2005-2841

The CVE-2005-2841 issue targets Cisco IOS Firewall Authentication Proxy for FTP and/or Telnet Sessions. A buffer overflow in this feature on specific IOS releases (12.2ZH/12.2ZL, 12.3/12.3T, 12.4/12.4T) allows remote attackers to cause a denial of service and potentially execute arbitrary code vi...

CVE-2005-2841: Undefined Security Weakness

Buffer overflow in Firewall Authentication Proxy for FTP and/or Telnet Sessions for Cisco IOS 12.2ZH and 12.2ZL, 12.3 and 12.3T, and 12.4 and 12.4T allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted user authentication credentials...