CVE-2012-2469

Cisco NX-OS 4.2, 5.0, 5.1, and 5.2 on Nexus 7000 series switches, when the High Availability HA policy is configured for Reset, allows remote attackers to cause a denial of service device reset via a malformed Cisco Discovery Protocol CDP packet, aka Bug IDs CSCtk34535 and CSCtk19132...

CVE-2012-1340

Cisco NX-OS FCIP Remote Denial of Service (CVE-2012-1340): Affects Cisco MDS NX-OS 4.2 and 5.2 on MDS 9000 switches. The FCIP implementation can be induced to reload the module by remote, unauthenticated attackers sending crafted FCIP headers. The root cause is described as improper processing of...

CVE-2012-2469

Cisco NX-OS 4.2, 5.0, 5.1, and 5.2 on Nexus 7000 series switches is affected by CVE-2012-2469. The issue arises when the High Availability (HA) policy is configured for Reset and a malformed Cisco Discovery Protocol (CDP) packet is received, potentially causing a denial of service via device rese...

Fedora 15 : kernel-2.6.43.8-1.fc15 (2012-8931)

Update to Linux 2.6.43.8 3.3.8. Disabled 32bit NX emulation. Suspected of being broken and it deviates from upstream. Unless there are further security issues, this will likely be the last F15 kernel update before End-of-Life. The 3.3.7 stable kernel contains a number of important bug fixes Note...

Fedora 16 : kernel-3.3.8-1.fc16 (2012-8890)

Linux v3.3.8 Fixes for CVE-2012-2390 and CVE-2012-2372. Disabled 32bit NX emulation which is suspected of being broken and aligns us more with upstream. Final 3.3.x update before rebasing to the 3.4 kernel series. Note that Tenable Network Security has extracted the preceding description block...

CVE-2011-4023

Memory leak in libcmd in Cisco NX-OS 5.0 on Nexus switches allows remote authenticated users to cause a denial of service memory consumption via SNMP requests, aka Bug ID CSCtr65682...

Memory corruption

Memory leak in libcmd in Cisco NX-OS 5.0 on Nexus switches allows remote authenticated users to cause a denial of service memory consumption via SNMP requests, aka Bug ID CSCtr65682...

CVE-2011-4023

CVE-2011-4023 affects Cisco NX-OS 5.0 on Nexus switches, caused by a memory leak in libcmd. Remote authenticated users can trigger a denial of service via SNMP requests (Bug CSCtr65682). No exploitation details are provided in the connected documents; remediation details are not specified in the ...

Samba SetInformationPolicy AuditEventsInfo Heap Overflow

This module triggers a vulnerability in the LSA RPC service of the Samba daemon because of an error on the PIDL auto-generated code. Making a specially crafted call to SetInformationPolicy to set a PolicyAuditEventsInformation allows to trigger a heap overflow and finally execute arbitrary code...

Cisco Security Advisory: Cisco NX-OS Malformed IP Packet Denial of Service Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Cisco Security Advisory: Cisco NX-OS Malformed IP Packet Denial of Service Vulnerability Advisory ID: cisco-sa-20120215-nxos Revision 1.0 For Public Release 2012 February 15 16:00 UTC GMT...

Code injection

Cisco NX-OS 4.2.x before 4.21SV15.1 on Nexus 1000v series switches; 4.x and 5.0.x before 5.02N11 on Nexus 5000 series switches; and 4.2.x before 4.2.8, 5.0.x before 5.0.5, and 5.1.x before 5.1.1 on Nexus 7000 series switches allows remote attackers to cause a denial of service netstack process...

CVE-2012-0352

Cisco NX-OS 4.2.x before 4.21SV15.1 on Nexus 1000v series switches; 4.x and 5.0.x before 5.02N11 on Nexus 5000 series switches; and 4.2.x before 4.2.8, 5.0.x before 5.0.5, and 5.1.x before 5.1.1 on Nexus 7000 series switches allows remote attackers to cause a denial of service netstack process...

CVE-2012-0352

Cisco NX-OS 4.2.x before 4.21SV15.1 on Nexus 1000v series switches; 4.x and 5.0.x before 5.02N11 on Nexus 5000 series switches; and 4.2.x before 4.2.8, 5.0.x before 5.0.5, and 5.1.x before 5.1.1 on Nexus 7000 series switches allows remote attackers to cause a denial of service netstack process...

CVE-2012-0352

Cisco NX-OS DoS vulnerability CVE-2012-0352 affects Nexus 1000v (4.2.x before 4.2(1)SV1(5.1)), Nexus 5000 (4.x/5.0.x before 5.0(2)N1(1)) and Nexus 7000 (4.2.x before 4.2.8, 5.0.x before 5.0.5, 5.1.x before 5.1.1). The issue allows remote attackers to crash the netstack process and reload the devi...

Cisco Nexus设备IP栈远程拒绝服务漏洞

Bugtraq ID: 52027 CVE ID：CVE-2012-0352 Cisco Nexus系列交换机是数据中心级交换机。采用Cisco Nexus OS操作系统 当操作系统IP栈处理畸形IP报文和从报文中获取第四层UDP或TCP信息时Cisco NX-OS软件受拒绝服务漏洞影响，可导致运行受此漏洞影响软件的Cisco Nexus 1000v, 5000和7000系列交换机重载 通过设备（过境）通信和到设备的通信都能触发此漏洞 0 Cisco Nexus 7000 Cisco Nexus 5000 Cisco Nexus 1000V 厂商解决方案 Cisco -----...

Cisco NX-OS Malformed IP Packet Denial of Service Vulnerability

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

Cisco Releases Security Advisory for Cisco NX-OS

Cisco has released a security advisory to address a vulnerability in the following Cisco NX-OS Software Series: Cisco Nexus 1000v Series Switches Cisco Nexus 5000 Series Switches Cisco Nexus 7000 Series Switches Exploitation of this vulnerability may allow an attacker to cause a denial-of-service...

Gentoo Security Advisory GLSA 201201-07 (NX Server NX Node)

The remote host is missing updates announced in advisory GLSA 201201-07. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 201201-07 (NX Server NX Node)

The remote host is missing updates announced in advisory GLSA 201201-07. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

CVE-2012-0809

Format string vulnerability in the sudodebug function in Sudo 1.8.0 through 1.8.3p1 allows local users to execute arbitrary code via format string sequences in the program name for sudo...