CVE-2012-4091

Cisco NX-OS RIP service engine is affected by CVE-2012-4091. A remote attacker can trigger a DoS (engine restart) by sending malformed RIP packets (RIPv4 or RIPv6) to UDP port 520. Impact is a DoS affecting routes learned via RIP. Remediation: Cisco has issued an advisory and software updates add...

CVE-2012-4141

CVE-2012-4141 identifies a directory traversal in the Cisco NX-OS CLI parser. The vulnerability allows a local, authenticated attacker to create arbitrary script files by supplying a relative pathname in the file name parameter, exploiting improper input filtering. Affected component: Cisco NX-OS...

CVE-2012-4075

Cisco NX-OS allows local users to gain privileges and execute arbitrary commands via shell metacharacters in unspecified command parameters, aka Bug IDs CSCtf19827 and CSCtf27788...

CVE-2012-4098

Cisco NX-OS BGP DoS (CVE-2012-4098) affects the BGP component of Cisco NX-OS where improper filtering of AS paths allows remote attackers to trigger a denial-of-service by sending a malformed UPDATE, causing BGP service reset/resync. The public descriptions across NVD, Tenable/OSS and OpenVAS con...

CVE-2012-4122

Cisco NX-OS Software contains a vulnerability in the CLI parser that allows an authenticated, local attacker to bypass access restrictions and create or overwrite arbitrary files via shell output redirection. Affected component: the CLI parsing logic in Cisco NX-OS. Impact: local privilege abuse ...

CVE-2012-4075

Cisco NX-OS contains an input-parsing vulnerability where parameters including special characters (e.g., back quotes) can be manipulated by an authenticated, local attacker to gain root-privilege access and execute arbitrary shell commands. This is associated with Bug IDs CSCtf19827 and CSCtf2778...

CVE-2012-4122

The CLI parser in Cisco NX-OS allows local users to bypass intended access restrictions, and overwrite or create arbitrary files, via shell output redirection, aka Bug IDs CSCts56672 and CSCts56669...

CVE-2012-4141: Undefined Security Weakness

Directory traversal vulnerability in the CLI parser in Cisco NX-OS allows local users to create arbitrary script files via a relative pathname in the "file name" parameter, aka Bug IDs CSCua71557 and CSCua71551...

CVE-2012-4122: Improper Input Validation

The CLI parser in Cisco NX-OS allows local users to bypass intended access restrictions, and overwrite or create arbitrary files, via shell output redirection, aka Bug IDs CSCts56672 and CSCts56669...

CVE-2012-4090: Undefined Security Weakness

The management interface in Cisco NX-OS on Nexus 7000 devices allows remote authenticated users to obtain sensitive configuration-file information by leveraging the network-operator role, aka Bug ID CSCti09089...

PT-2013-1631

Name of the Vulnerable Software and Affected Versions Cisco NX-OS affected versions not specified Description The issue allows remote attackers to cause a denial of service by sending a malformed RIPv4 or RIPv6 message to the RIP service engine, which could lead to the engine restarting. This is...

CVE-2012-4098: Improper Input Validation

The BGP implementation in Cisco NX-OS does not properly filter AS paths, which allows remote attackers to cause a denial of service BGP service reset and resync via a malformed UPDATE message, aka Bug ID CSCtn13055...

PT-2013-1616

Name of the Vulnerable Software and Affected Versions Cisco NX-OS affected versions not specified Description The issue allows local users to gain privileges and execute arbitrary commands via shell metacharacters in unspecified command parameters. This is due to poor processing of parameters tha...

CVE-2012-4091: Improper Input Validation

The RIP service engine in Cisco NX-OS allows remote attackers to cause a denial of service engine restart via a malformed 1 RIPv4 or 2 RIPv6 message, aka Bug ID CSCtj73415...

PT-2013-1661

Name of the Vulnerable Software and Affected Versions Cisco NX-OS affected versions not specified Description A directory traversal issue in the CLI parser of Cisco NX-OS allows local users to create arbitrary script files via a relative pathname in the file name parameter. This is due to imprope...

PT-2013-1630

Name of the Vulnerable Software and Affected Versions Cisco NX-OS versions affected versions not specified Description A vulnerability exists in the management interface of Cisco NX-OS, allowing remote authenticated users to obtain sensitive configuration-file information. This issue is due to...

PT-2013-1638

Name of the Vulnerable Software and Affected Versions Cisco NX-OS affected versions not specified Description The issue concerns the BGP implementation, which does not properly filter AS paths. This allows remote attackers to cause a denial of service by resetting and resyncing the BGP service vi...

CVE-2012-4075: Improper Neutralization of Special Elements used in an OS Command

Cisco NX-OS allows local users to gain privileges and execute arbitrary commands via shell metacharacters in unspecified command parameters, aka Bug IDs CSCtf19827 and CSCtf27788...

PT-2013-1657

Name of the Vulnerable Software and Affected Versions Cisco NX-OS affected versions not specified Description The issue allows local users to bypass intended access restrictions and create or overwrite arbitrary files via shell output redirection. This is due to improper input filtering in the...

CVE-2013-1121

The regex engine in the BGP implementation in Cisco NX-OS, when a complex regular expression is configured for inbound routes, allows remote attackers to cause a denial of service device reload via a crafted AS path set, aka Bug ID CSCuf49554...