CVE-2014-0677

The Label Distribution Protocol LDP functionality in Cisco NX-OS allows remote attackers to cause a denial of service temporary LDP session outage via LDP discovery traffic containing malformed Hello messages, aka Bug ID CSCul88851...

CVE-2014-0676

Cisco NX-OS contains a local-authentication bypass vulnerability (CVE-2014-0676) in TACACS+ command authorization. Affected: Cisco NX-OS software. Description: an authenticated, local attacker can bypass TACACS+ command restrictions by executing a sequence of multiple commands, per Bug CSCum47367...

CVE-2014-0677

CVE-2014-0677 affects Cisco NX-OS LDP functionality. The vulnerability arises from how the Label Distribution Protocol (LDP) handles certain malformed Hello messages in LDP discovery traffic, allowing an unauthenticated remote attacker to cause a denial of service by triggering a temporary LDP se...

CVE-2014-0676

Cisco NX-OS allows local users to bypass intended TACACS+ command restrictions via a series of multiple commands, aka Bug ID CSCum47367...

Cisco NX-OS Software Crafted Border Gateway Protocol Update Message Denial of Service Vulnerability (Cisco-SA-20140106-CVE-2013-6982)

A vulnerability in the Border Gateway Protocol BGP functionality of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause all BGP sessions on the device to reset. Copyright C 2014 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources,...

Cisco Open Network Environment Platform Unvalidated Pointer Vulnerability (Cisco-SA-20130913-CVE-2013-5496)

A vulnerability in the Open Network Environment Platform ONEP could allow an authenticated, remote attacker to cause the network element to reload. Copyright C 2014 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...

CVE-2013-6982

The BGP implementation in Cisco NX-OS 6.22a and earlier does not properly handle the interaction of UPDATE messages with IPv6, VPNv4, and VPNv6 labeled unicast-address families, which allows remote attackers to cause a denial of service peer reset via a crafted message, aka Bug ID CSCuj03174...

CVE-2013-6982

The CVE-2013-6982 issue affects Cisco NX-OS (6.2(2a) and earlier) where BGP UPDATE message processing fails to handle IPv6, VPNv4, and VPNv6 labeled unicast-address families correctly. This can allow an unauthenticated remote attacker to cause denial of service by resetting BGP peers via a crafte...

CVE-2013-6982

The BGP implementation in Cisco NX-OS 6.22a and earlier does not properly handle the interaction of UPDATE messages with IPv6, VPNv4, and VPNv6 labeled unicast-address families, which allows remote attackers to cause a denial of service peer reset via a crafted message, aka Bug ID CSCuj03174...

Cisco NX-OS Software Crafted Border Gateway Protocol Update Message Denial of Service Vulnerability

A vulnerability in the Border Gateway Protocol BGP functionality of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause all BGP sessions on the device to reset. The vulnerability is due to the improper processing of specifically crafted BGP update messages. An attacker...

Cisco NX-OS Arbitrary File Access Vulnerability

A vulnerability in the Command Line Interface CLI of the Cisco NX-OS Software could allow an authenticated, local attacker to access arbitrary files on the device. The vulnerability is due to improper filtering of user input. An attacker could exploit this vulnerability by leveraging the tar...

CVE-2012-4135

Directory traversal vulnerability in filesys in Cisco NX-OS 6.12 and earlier allows local users to access arbitrary files via crafted command-line arguments during a delete action, aka Bug IDs CSCty07270, CSCty07271, CSCty07273, and CSCty07275...

CVE-2012-4131

Directory traversal vulnerability in tar in Cisco NX-OS allows local users to access arbitrary files via crafted command-line arguments, aka Bug IDs CSCty07157, CSCty07159, CSCty07162, and CSCty07164...

Directory traversal

Directory traversal vulnerability in tar in Cisco NX-OS allows local users to access arbitrary files via crafted command-line arguments, aka Bug IDs CSCty07157, CSCty07159, CSCty07162, and CSCty07164...

Directory traversal

Directory traversal vulnerability in filesys in Cisco NX-OS 6.12 and earlier allows local users to access arbitrary files via crafted command-line arguments during a delete action, aka Bug IDs CSCty07270, CSCty07271, CSCty07273, and CSCty07275...

CVE-2012-4135

Directory traversal vulnerability in filesys in Cisco NX-OS 6.12 and earlier allows local users to access arbitrary files via crafted command-line arguments during a delete action, aka Bug IDs CSCty07270, CSCty07271, CSCty07273, and CSCty07275...

CVE-2012-4135

Cisco NX-OS CVE-2012-4135 is a local directory-traversal vulnerability in filesys on Cisco NX-OS 6.1(2) and earlier. Exploitation requires local access and crafted arguments to the filesys delete command, allowing an authenticated attacker to access or delete arbitrary files. The issue is associa...

CVE-2012-4131

Cisco NX-OS contains a directory traversal vulnerability (CVE-2012-4131) in the tar command. A local attacker with access to the CLI can leverage crafted arguments to read arbitrary files due to improper input filtering. Affected by the vulnerability are Cisco NX-OS devices; Cisco notes that soft...

CVE-2012-4131

Directory traversal vulnerability in tar in Cisco NX-OS allows local users to access arbitrary files via crafted command-line arguments, aka Bug IDs CSCty07157, CSCty07159, CSCty07162, and CSCty07164...

Cisco NX-OS Directory Traversal Vulnerability

A vulnerability in the Command Line Interface CLI of the Cisco NX-OS Software could allow an authenticated, local attacker to delete arbitrary files on the device. The vulnerability is due to improper filtering of user input. An attacker could exploit this vulnerability by leveraging the filesys...