PT-2014-1315

Name of the Vulnerable Software and Affected Versions Cisco NX-OS versions 1.4 through 1.41i Cisco NX-OS versions 5.0 through 5.03U22 on Nexus 3000 devices Cisco NX-OS versions 4.1 through 4.12E11l on Nexus 4000 devices Cisco NX-OS versions 5.x through 5.13N11 on Nexus 5000 devices Cisco NX-OS...

CVE-2013-6975

Directory traversal vulnerability in the command-line interface in Cisco NX-OS 6.22a and earlier allows local users to read arbitrary files via unspecified input, aka Bug ID CSCul05217...

Directory traversal

Directory traversal vulnerability in the command-line interface in Cisco NX-OS 6.22a and earlier allows local users to read arbitrary files via unspecified input, aka Bug ID CSCul05217...

CVE-2013-6975

Directory traversal vulnerability in the command-line interface in Cisco NX-OS 6.22a and earlier allows local users to read arbitrary files via unspecified input, aka Bug ID CSCul05217...

CVE-2013-6975

CVE-2013-6975 describes a directory traversal vulnerability in the Cisco NX-OS CLI. Affected software is Cisco NX-OS 6.2(2a) and earlier. The issue allows an authenticated, local user to read arbitrary files on the device via unspecified input. Multiple connected advisories reiterate the same cor...

CVE-2013-6975: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the command-line interface in Cisco NX-OS 6.22a and earlier allows local users to read arbitrary files via unspecified input, aka Bug ID CSCul05217...

PT-2014-3238

Name of the Vulnerable Software and Affected Versions Cisco NX-OS versions 6.22a and earlier Description A directory traversal issue in the command-line interface allows local users to read arbitrary files via unspecified input. Recommendations For Cisco NX-OS versions 6.22a and earlier, at the...

CVE-2014-0684

Cisco NX-OS 6.22 on Nexus 7000 switches allows local users to cause a denial of service via crafted sed input, aka Bug ID CSCui56136...

Code injection

Cisco NX-OS 6.22 on Nexus 7000 switches allows local users to cause a denial of service via crafted sed input, aka Bug ID CSCui56136...

CVE-2014-0684

Cisco NX-OS 6.22 on Nexus 7000 switches allows local users to cause a denial of service via crafted sed input, aka Bug ID CSCui56136...

CVE-2014-0684

Cisco NX-OS 6.2(2) on Nexus 7000 switches is affected by CVE-2014-0684. The vulnerability enables a local attacker to trigger a denial-of-service condition by supplying crafted input to the sed command, due to improper input validation (Bug CSCui56136). Impact per sources is local DoS with the po...

CVE-2014-0684: Improper Input Validation

Cisco NX-OS 6.22 on Nexus 7000 switches allows local users to cause a denial of service via crafted sed input, aka Bug ID CSCui56136...

Cisco Nexus 7000 Denial of Service Vulnerability (Cisco-SA-20140506-CVE-2014-0684)

A vulnerability in Cisco Nexus 7000 Series Switches could allow an authenticated, local attacker to cause a denial of service DoS condition on an affected device. Copyright C 2014 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by t...

PT-2014-3779

Name of the Vulnerable Software and Affected Versions Cisco NX-OS version 6.22 Description A denial of service condition can be caused by an authenticated, local attacker on affected devices due to an error in input validation for the sed command. The attacker could exploit this by passing crafte...

Cisco NX-OS Software Label Distribution Protocol Message Vulnerability

A vulnerability in the Label Distribution Protocol LDP message processing of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause an affected device to stop accepting valid LDP sessions during a 60-second period. The vulnerability is due to how certain malformed LDP Hello...

Cisco NX-OS Software TACACS+ Command Authorization Vulnerability

A vulnerability in the TACACS+ command authorization code of Cisco NX-OS Software could allow an authenticated, local attacker to execute certain commands without TACACS+ server authorization. The vulnerability is due to the processing of certain commands when executed in a sequence. An attacker...

Cisco NX-OS Software TACACS+ Command Authorization Vulnerability (Cisco-SA-20140123-CVE-2014-0676)

A vulnerability in the TACACS+ command authorization code of Cisco NX-OS Software could allow an authenticated, local attacker to execute certain commands without TACACS+ server authorization. Copyright C 2014 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced...

Cisco NX-OS Software Label Distribution Protocol Message Vulnerability (Cisco-SA-20140123-CVE-2014-0677)

A vulnerability in the Label Distribution Protocol LDP message processing of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause an affected device to stop accepting valid LDP sessions during a 60-second period. Copyright C 2014 Greenbone Networks GmbH Some text...

CVE-2014-0676

Cisco NX-OS allows local users to bypass intended TACACS+ command restrictions via a series of multiple commands, aka Bug ID CSCum47367...

CVE-2014-0677

The Label Distribution Protocol LDP functionality in Cisco NX-OS allows remote attackers to cause a denial of service temporary LDP session outage via LDP discovery traffic containing malformed Hello messages, aka Bug ID CSCul88851...