VMware ESX / ESXi Multiple Vulnerabilities (VMSA-2009-0014) (remote check)

The remote VMware ESX / ESXi host is missing a security-related patch. It is, therefore, affected by multiple vulnerabilities, including remote code execution vulnerabilities, in the following components : - ISC DHCP dhclient - Integrated Services Digital Network ISDN subsystem - Java Runtime...

Debian DLA-360-1 : linux-2.6 security update

This update fixes the CVEs described below. CVE-2013-7446 Dmitry Vyukov discovered that a particular sequence of valid operations on local AFUNIX sockets can result in a use-after-free. This may be used to cause a denial of service crash or possibly for privilege escalation. CVE-2015-7799...

CVE-2006-5749

The isdnpppccpresetallocstate function in drivers/isdn/isdnppp.c in the Linux 2.4 kernel before 2.4.34-rc4 does not call the inittimer function for the ISDN PPP CCP reset state timer, which has unknown attack vectors and results in a system crash...

The vulnerability of the microprogramming software of the Cisco TelePresence ISDN Gateway allows a perpetrator to access the authentication data of arbitrary users.

The vulnerability of the microprogramming software of the Cisco TelePresence ISDN Gateway relates to the falsification of inter-site requests. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to the authentication data of arbitrary users...

Cisco TelePresence ISDN Gateway Device Cross-Site Request Forgery Vulnerability

The Cisco TelePresence ISDN Gateway is a telepresence ISDN video gateway solution. The solution provides high-definition video, content sharing, and encryption. A cross-site request forgery vulnerability exists in the Cisco TelePresence ISDN Gateway appliance, which allows remote attackers to...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability on Cisco TelePresence ISDN Gateway devices with software 2.21.106 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuu90724...

CVE-2015-4252

Cross-site request forgery CSRF vulnerability on Cisco TelePresence ISDN Gateway devices with software 2.21.106 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuu90724...

CVE-2015-4252

Cross-site request forgery CSRF vulnerability on Cisco TelePresence ISDN Gateway devices with software 2.21.106 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuu90724...

CVE-2015-4252: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability on Cisco TelePresence ISDN Gateway devices with software 2.21.106 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuu90724...

CVE-2015-4252

The CVE-2015-4252 issue affects Cisco TelePresence ISDN Gateway devices (software 2.2(1.106)). The root cause is CSRF protection weakness that could allow an unauthenticated, remote attacker to perform actions within a user’s context, effectively hijacking authentication. Multiple connected sourc...

Cisco TelePresence ISDN Gateway Software Cross-Site Request Forgery Vulnerability

A vulnerability in the Cisco TelePresence ISDN Gateway could allow an unauthenticated, remote attacker to execute unwanted actions. The vulnerability is due to insufficient cross-site request forgery CSRF protection. An attacker could exploit this vulnerability by tricking the user of a web...

Cisco TelePresence ISDN Gateway Command Injection Vulnerability

According to its self-reported version, the remote Cisco TelePresence ISDN Gateway device contains a vulnerability in its web framework, which can allow an authenticated, remote attacker to inject arbitrary commands on the device with root permissions. C Tenable Network Security, Inc...

Code injection

The ISDN implementation in Cisco IOS 15.3S allows remote attackers to cause a denial of service device reload via malformed Q931 SETUP messages, aka Bug ID CSCut37890...

CVE-2015-0731

The ISDN implementation in Cisco IOS 15.3S allows remote attackers to cause a denial of service device reload via malformed Q931 SETUP messages, aka Bug ID CSCut37890...

CVE-2015-0731

Cisco IOS 15.3S ISDN implementation is affected by a vulnerability in the ISDN processing code that mishandles malformed Q931 SETUP messages, allowing an unauthenticated adjacent attacker to cause a device reload (DoS). The issue stems from improper parsing of Q931 SETUP messages (Bug CSCut37890)...

CVE-2015-0731: Undefined Security Weakness

The ISDN implementation in Cisco IOS 15.3S allows remote attackers to cause a denial of service device reload via malformed Q931 SETUP messages, aka Bug ID CSCut37890...

Cisco IOS Voice Gateway Malformed ISDN Q931 Message Denial of Service Vulnerability

A vulnerability in the Integrated Services Digital Network ISDN processing code of Cisco IOS could allow an unauthenticated, adjacent attacker to cause a reload of the affected device. The vulnerability is due to improper processing of malformed ISDN Q931 SETUP messages. An attacker could exploit...

fli4l cross-site scripting vulnerability

fli4l is a Linux-based ISDN, DSL and Ethernet router product developed by the fli4l team, which can be configured via ASCII files and supports multiple connection methods, displaying and calculating connection times and costs, monitoring traffic and monitoring ISDN calls. A cross-site scripting...

CVE-2014-3347

Cisco IOS 15.14M2 on Cisco 1800 ISR devices, when the ISDN Basic Rate Interface is enabled, allows remote attackers to cause a denial of service device hang by leveraging knowledge of the ISDN phone number to trigger an interrupt timer collision during entropy collection, leading to an invalid...

Design/Logic Flaw

Cisco IOS 15.14M2 on Cisco 1800 ISR devices, when the ISDN Basic Rate Interface is enabled, allows remote attackers to cause a denial of service device hang by leveraging knowledge of the ISDN phone number to trigger an interrupt timer collision during entropy collection, leading to an invalid...