CVE-2012-4121

Cisco NX-OS contains a local-privilege-escalation flaw in the Stream Editor (sed) usage via the r and w commands. The issue is tied to input-validation problems, enabling an authenticated, local attacker to read or modify arbitrary files on the device. Documents reference Bug IDs CSCts56559, CSCt...

CVE-2012-4097

CVE-2012-4097 affects Cisco NX-OS BGP: the BGP implementation does not properly filter segment types in AS paths, allowing remote attackers to trigger a denial of service (BGP service reset) via a malformed UPDATE message (Bug CSCtn13043). This is documented across multiple sources (NVD, Red Hat ...

CVE-2012-4077

Cisco NX-OS allows local users to gain privileges and execute arbitrary commands via the sed e option, aka Bug IDs CSCtf25457 and CSCtf27651...

CVE-2012-4099

Cisco NX-OS BGP implementation vulnerability CVE-2012-4099 allows remote attackers to trigger a denial of service (BGP service reset and resync) by sending a malformed UPDATE message due to improper AS-path filtering (Bug CSCtn13065). Affected component is the BGP/AS-path processing in NX-OS; imp...

CVE-2012-4099

The BGP implementation in Cisco NX-OS does not properly filter AS paths, which allows remote attackers to cause a denial of service BGP service reset and resync via a malformed UPDATE message, aka Bug ID CSCtn13065...

PT-2013-1639

Name of the Vulnerable Software and Affected Versions Cisco NX-OS affected versions not specified Description The issue is related to the BGP implementation, which does not properly filter AS paths. This allows remote attackers to cause a denial of service, resulting in a BGP service reset and...

CVE-2012-4077: Undefined Security Weakness

Cisco NX-OS allows local users to gain privileges and execute arbitrary commands via the sed e option, aka Bug IDs CSCtf25457 and CSCtf27651...

PT-2013-1637

Name of the Vulnerable Software and Affected Versions Cisco NX-OS affected versions not specified Description The issue is related to the BGP implementation, which does not properly filter segment types in AS paths. This allows remote attackers to cause a denial of service, specifically a BGP...

CVE-2012-4121: Undefined Security Weakness

Cisco NX-OS allows local users to gain privileges, and read or modify arbitrary files, via the sed 1 r and 2 w commands, aka Bug IDs CSCts56559, CSCts56565, CSCts56570, and CSCts56574...

CVE-2012-4076: Improper Input Validation

Cisco NX-OS allows local users to gain privileges and execute arbitrary commands via shell metacharacters in a command that calls the system library function, aka Bug IDs CSCtf23559 and CSCtf27780...

CVE-2012-4099: Improper Input Validation

The BGP implementation in Cisco NX-OS does not properly filter AS paths, which allows remote attackers to cause a denial of service BGP service reset and resync via a malformed UPDATE message, aka Bug ID CSCtn13065...

CVE-2012-4097: Improper Input Validation

The BGP implementation in Cisco NX-OS does not properly filter segment types in AS paths, which allows remote attackers to cause a denial of service BGP service reset via a malformed UPDATE message, aka Bug ID CSCtn13043...

Cisco Nexus 7000 Series Switches Remote Denial of Service Vulnerability

Cisco Nexus 7000 Series switches running on NX-OS are prone to a remote denial-of-service vulnerability. Copyright C 2013 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Cisco NX-OS Malformed IP Packet Denial of Service Vulnerability (cisco-sa-20120215-nxos)

Cisco NX-OS Software is affected by a denial of service DoS vulnerability that could cause Cisco Nexus 1000v, 1010, 5000, and 7000 Series Switches, and the Cisco Virtual Security Gateway VSG for Nexus 1000V Series Switches, that are running affected versions of Cisco NX-OS Software to reload when...

Cisco NX-OS Software Input Validation Vulnerability

A vulnerability in the input parsing of Cisco NX-OS Software could allow an unauthenticated, local attacker to execute commands on the underlying operating system. The vulnerability is due to poor processing of parameters that include special characters. An attacker could exploit this vulnerabili...

Cisco NX-OS Software Input Validation Vulnerability

A vulnerability in input parsing in Cisco NX-OS Software could allow an authenticated, local attacker to execute commands on the underlying operating system. The vulnerability is due to improper filtering of parameters passed to the Stream Editor sed filter. An attacker could exploit this...

PT-2013-1618

Name of the Vulnerable Software and Affected Versions Cisco NX-OS affected versions not specified Description A vulnerability in input parsing in Cisco NX-OS Software could allow an authenticated, local attacker to execute commands on the underlying operating system. The issue is due to improper...

PT-2013-1617

Name of the Vulnerable Software and Affected Versions Cisco NX-OS affected versions not specified Description The issue allows local users to gain privileges and execute arbitrary commands via shell metacharacters in a command that calls the system library function. This is due to poor processing...

Multiple Vulnerabilities in Cisco NX-OS-Based Products (cisco-sa-20130424-nxosmulti)

Multiple Cisco NX-OS-Based products are prone to multiple remote buffer-overflow vulnerabilities because they fail to perform adequate boundary-checks on user-supplied data. Copyright C 2013 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are...

Cisco NX-OS Detection (SNMP)

SNMP based detection of Cisco NX-OS. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description scriptoid"1.3.6.1.4.1.25623.1.0.103799";...