Cisco NX-OS Malformed IP Packet Denial of Service Vulnerability

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

Cisco Releases Security Advisory for Cisco NX-OS

Cisco has released a security advisory to address a vulnerability in the following Cisco NX-OS Software Series: Cisco Nexus 1000v Series Switches Cisco Nexus 5000 Series Switches Cisco Nexus 7000 Series Switches Exploitation of this vulnerability may allow an attacker to cause a denial-of-service...

Cisco NX-OS Interface Commands Privilege Escalation (CVE-2011-2569)

A command execution vulnerability has been reported in Cisco NX-OS...

CVE-2011-2569

Cisco NX-OS (Nexus OS) 4.2 and 5.0 and Cisco UCS software 1.4 and 2.0 are affected by CVE-2011-2569 due to improper sanitization of user input in CLI options, enabling authenticated, local users to escalate privileges via unspecified vectors. Root cause: insufficient restriction of command-line o...

CVE-2011-2581

The ACL implementation in Cisco NX-OS 5.02 and 5.03 before 5.03N21 on Nexus 5000 series switches, and NX-OS before 5.03U12a on Nexus 3000 series switches, does not properly handle comments in conjunction with deny statements, which allows remote attackers to bypass intended access restrictions in...

Design/Logic Flaw

The ACL implementation in Cisco NX-OS 5.02 and 5.03 before 5.03N21 on Nexus 5000 series switches, and NX-OS before 5.03U12a on Nexus 3000 series switches, does not properly handle comments in conjunction with deny statements, which allows remote attackers to bypass intended access restrictions in...

CVE-2011-2581

Cisco Nexus NX-OS ACL bypass (CVE-2011-2581) affects Nexus 5000 and 3000 series: placing a remark before a deny in an ACL can allow bypass of access restrictions, enabling remote packet flow in opportunistic scenarios. Root cause: improper handling of comments when paired with deny statements. Af...

CVE-2011-2581

The ACL implementation in Cisco NX-OS 5.02 and 5.03 before 5.03N21 on Nexus 5000 series switches, and NX-OS before 5.03U12a on Nexus 3000 series switches, does not properly handle comments in conjunction with deny statements, which allows remote attackers to bypass intended access restrictions in...

Cisco Security Advisory: Apache HTTPd Range Header Denial of Service Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Cisco Security Advisory: Apache HTTPd Range Header Denial of Service Vulnerability Advisory ID: cisco-sa-20110830-apache Revision 1.0 For Public Release 2011 August 30 1600 UTC GMT Summary ======= The Apache HTTPd server contains a denial of service...

多个Cisco产品报文远程拒绝服务漏洞

Bugraq ID: 36303 CVE ID：CVE-2009-0627 Cisco多个产品处理特殊构建的TCP报文存在问题，远程攻击者可以利用漏洞对设备进行拒绝服务攻击。 产品在TCP协议中存在一个拒绝服务攻击的问题。通过操作TCP连接状态，攻击者可以使系统处于长时间或在部分条件下可能永久的维护TCP连接的攻击状态。通过大量充足的开放TCP连接，攻击者可以使系统消耗内部缓冲区和内存资源，导致新的TCP连接不能访问目标端口或整个系统。需要重新启动获得正常功能。要利用这些漏洞需要通过完整的三次握手。...

CVE-2009-0627

Unspecified vulnerability in Cisco NX-OS before 4.01aN21, when running on Nexus 5000 platforms, allows remote attackers to cause a denial of service crash via an unspecified "sequence of TCP packets" related to "TCP State manipulation," possibly related to separate attacks against CVE-2008-4609...

Code injection

Unspecified vulnerability in Cisco NX-OS before 4.01aN21, when running on Nexus 5000 platforms, allows remote attackers to cause a denial of service crash via an unspecified "sequence of TCP packets" related to "TCP State manipulation," possibly related to separate attacks against CVE-2008-4609...

CVE-2009-0627

The CVE-2009-0627 entry concerns Cisco NX-OS on Nexus 5000 platforms (before 4.0(1a)N2(1)). It describes an unspecified vulnerability that lets remote attackers crash the device via a sequence of TCP packets related to TCP state manipulation, possibly linked to CVE-2008-4609 (sockstress). The con...