Code injection

The Label Distribution Protocol LDP functionality in Cisco NX-OS allows remote attackers to cause a denial of service temporary LDP session outage via LDP discovery traffic containing malformed Hello messages, aka Bug ID CSCul88851...

Command injection

Cisco NX-OS allows local users to bypass intended TACACS+ command restrictions via a series of multiple commands, aka Bug ID CSCum47367...

CVE-2014-0676

Cisco NX-OS contains a local-authentication bypass vulnerability (CVE-2014-0676) in TACACS+ command authorization. Affected: Cisco NX-OS software. Description: an authenticated, local attacker can bypass TACACS+ command restrictions by executing a sequence of multiple commands, per Bug CSCum47367...

CVE-2014-0676

Cisco NX-OS allows local users to bypass intended TACACS+ command restrictions via a series of multiple commands, aka Bug ID CSCum47367...

CVE-2014-0677

CVE-2014-0677 affects Cisco NX-OS LDP functionality. The vulnerability arises from how the Label Distribution Protocol (LDP) handles certain malformed Hello messages in LDP discovery traffic, allowing an unauthenticated remote attacker to cause a denial of service by triggering a temporary LDP se...

CVE-2014-0677

The Label Distribution Protocol LDP functionality in Cisco NX-OS allows remote attackers to cause a denial of service temporary LDP session outage via LDP discovery traffic containing malformed Hello messages, aka Bug ID CSCul88851...

PT-2014-3771

Name of the Vulnerable Software and Affected Versions Cisco NX-OS affected versions not specified Description A local user can bypass intended TACACS+ command restrictions by executing a series of multiple commands. The issue arises from the processing of certain commands when executed in a...

CVE-2014-0676: Undefined Security Weakness

Cisco NX-OS allows local users to bypass intended TACACS+ command restrictions via a series of multiple commands, aka Bug ID CSCum47367...

CVE-2014-0677: Improper Input Validation

The Label Distribution Protocol LDP functionality in Cisco NX-OS allows remote attackers to cause a denial of service temporary LDP session outage via LDP discovery traffic containing malformed Hello messages, aka Bug ID CSCul88851...

PT-2014-3772

Name of the Vulnerable Software and Affected Versions Cisco NX-OS affected versions not specified Description The issue allows remote attackers to cause a denial of service, specifically a temporary LDP session outage, via LDP discovery traffic containing malformed Hello messages. This is due to...

Cisco NX-OS Software Crafted Border Gateway Protocol Update Message Denial of Service Vulnerability (Cisco-SA-20140106-CVE-2013-6982)

A vulnerability in the Border Gateway Protocol BGP functionality of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause all BGP sessions on the device to reset. Copyright C 2014 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources,...

Cisco Open Network Environment Platform Unvalidated Pointer Vulnerability (Cisco-SA-20130913-CVE-2013-5496)

A vulnerability in the Open Network Environment Platform ONEP could allow an authenticated, remote attacker to cause the network element to reload. Copyright C 2014 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...

CVE-2013-6982

The BGP implementation in Cisco NX-OS 6.22a and earlier does not properly handle the interaction of UPDATE messages with IPv6, VPNv4, and VPNv6 labeled unicast-address families, which allows remote attackers to cause a denial of service peer reset via a crafted message, aka Bug ID CSCuj03174...

CVE-2013-6982

The BGP implementation in Cisco NX-OS 6.22a and earlier does not properly handle the interaction of UPDATE messages with IPv6, VPNv4, and VPNv6 labeled unicast-address families, which allows remote attackers to cause a denial of service peer reset via a crafted message, aka Bug ID CSCuj03174...

CVE-2013-6982

The CVE-2013-6982 issue affects Cisco NX-OS (6.2(2a) and earlier) where BGP UPDATE message processing fails to handle IPv6, VPNv4, and VPNv6 labeled unicast-address families correctly. This can allow an unauthenticated remote attacker to cause denial of service by resetting BGP peers via a crafte...

CVE-2013-6982: Improper Input Validation

The BGP implementation in Cisco NX-OS 6.22a and earlier does not properly handle the interaction of UPDATE messages with IPv6, VPNv4, and VPNv6 labeled unicast-address families, which allows remote attackers to cause a denial of service peer reset via a crafted message, aka Bug ID CSCuj03174...

Cisco NX-OS Software Crafted Border Gateway Protocol Update Message Denial of Service Vulnerability

A vulnerability in the Border Gateway Protocol BGP functionality of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause all BGP sessions on the device to reset. The vulnerability is due to the improper processing of specifically crafted BGP update messages. An attacker...

PT-2014-3239

Name of the Vulnerable Software and Affected Versions Cisco NX-OS versions 6.22a and earlier Description The issue is related to the BGP implementation, which does not properly handle the interaction of UPDATE messages with IPv6, VPNv4, and VPNv6 labeled unicast-address families. This allows remo...

Cisco NX-OS Arbitrary File Access Vulnerability

A vulnerability in the Command Line Interface CLI of the Cisco NX-OS Software could allow an authenticated, local attacker to access arbitrary files on the device. The vulnerability is due to improper filtering of user input. An attacker could exploit this vulnerability by leveraging the tar...

CVE-2012-4131

Directory traversal vulnerability in tar in Cisco NX-OS allows local users to access arbitrary files via crafted command-line arguments, aka Bug IDs CSCty07157, CSCty07159, CSCty07162, and CSCty07164...