CVE-2014-3341

The SNMP module in Cisco NX-OS 7.03N11 and earlier on Nexus 5000 and 6000 devices provides different error messages for invalid requests depending on whether the VLAN ID exists, which allows remote attackers to enumerate VLANs via a series of requests, aka Bug ID CSCup85616...

Design/Logic Flaw

The SNMP module in Cisco NX-OS 7.03N11 and earlier on Nexus 5000 and 6000 devices provides different error messages for invalid requests depending on whether the VLAN ID exists, which allows remote attackers to enumerate VLANs via a series of requests, aka Bug ID CSCup85616...

CVE-2014-3341

The CVE-2014-3341 issue affects Cisco NX-OS Software SNMP module on Nexus 5000/6000 and versions up to 7.0(3)N1(1). The vulnerability arises because the SNMP service returns different error messages for invalid requests depending on whether the VLAN ID exists, enabling remote attackers to enumera...

CVE-2014-3341

The SNMP module in Cisco NX-OS 7.03N11 and earlier on Nexus 5000 and 6000 devices provides different error messages for invalid requests depending on whether the VLAN ID exists, which allows remote attackers to enumerate VLANs via a series of requests, aka Bug ID CSCup85616...

CVE-2014-3341: Exposure of Sensitive Information to an Unauthorized Actor

The SNMP module in Cisco NX-OS 7.03N11 and earlier on Nexus 5000 and 6000 devices provides different error messages for invalid requests depending on whether the VLAN ID exists, which allows remote attackers to enumerate VLANs via a series of requests, aka Bug ID CSCup85616...

Cisco NX-OS Software SNMP Information Disclosure Vulnerability

A vulnerability in the Simple Network Management Protocol SNMP module of Cisco NX-OS Software could allow an unauthenticated, remote attacker to access sensitive information. The vulnerability is due to a failure to respond to invalid requests in the same manner when specifying a VLAN ID. An...

PT-2014-5233

Name of the Vulnerable Software and Affected Versions Cisco NX-OS versions 7.03N11 and earlier Description A vulnerability in the Simple Network Management Protocol SNMP module of Cisco NX-OS Software could allow an unauthenticated, remote attacker to access sensitive information. The vulnerabili...

CVE-2014-3330

Cisco NX-OS 6.12I21 on Nexus 9000 switches does not properly process packet-drop policy checks for logged packets, which allows remote attackers to bypass intended access restrictions via a flood of packets matching a policy that contains the log keyword, aka Bug ID CSCuo02489...

Design/Logic Flaw

Cisco NX-OS 6.12I21 on Nexus 9000 switches does not properly process packet-drop policy checks for logged packets, which allows remote attackers to bypass intended access restrictions via a flood of packets matching a policy that contains the log keyword, aka Bug ID CSCuo02489...

CVE-2014-3330

Cisco NX-OS 6.1(2)I2(1) on Nexus 9000 switches contains an ACL logging policy-check flaw that can allow a remote attacker to bypass access restrictions by flooding the device with packets that match a log-enabled policy (Bug CSCuo02489). The issue affects the way logged packets are processed and ...

CVE-2014-3330

Cisco NX-OS 6.12I21 on Nexus 9000 switches does not properly process packet-drop policy checks for logged packets, which allows remote attackers to bypass intended access restrictions via a flood of packets matching a policy that contains the log keyword, aka Bug ID CSCuo02489...

CVE-2014-3330: Undefined Security Weakness

Cisco NX-OS 6.12I21 on Nexus 9000 switches does not properly process packet-drop policy checks for logged packets, which allows remote attackers to bypass intended access restrictions via a flood of packets matching a policy that contains the log keyword, aka Bug ID CSCuo02489...

PT-2014-5223

Name of the Vulnerable Software and Affected Versions Cisco NX-OS version 6.12I21 Description The issue is related to the improper processing of packet-drop policy checks for logged packets, allowing remote attackers to bypass intended access restrictions. This can be achieved by sending a flood ...

[oss-security] LMS-2014-07-07-1: python-lz4

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello All, Please find the bug report for python-lz4 attached below. Steeve Morin @steeve, the maintainer of the python-lz4 package, has been great to work with. He worked quickly to get the package up to date by this morning. Thanks, Don A. Bailey...

PHP 5.4.0RC6 64bit Denial of Service

No description provided by source. ?php / This script generates a POST header that makes PHP 5.4.0RC6 64 bit try to execute code at 0x1111111111111111 C Copyright 2012 Stefan Esser PHP 5.3.9 requires you to know the address of a writable address filled with NULL. 32bit requires you to create a fa...

Interspire TrackPoint NX Index.PHP Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/16214/info TrackPoint NX is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary...

ActiveKB NX 2.6 Index.PHP Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/26027/info ActiveKB NX is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

mcrypt <= 2.5.8 Stack Based Overflow

No description provided by source. !/usr/bin/perl Title : mcrypt = 2.5.8 STACK based overflow Date : 23/11/2012 Exploit Author : Tosh CVE : CVE-2012-4409 Patch : http://www.openwall.com/lists/oss-security/2012/09/06/8 Tested on : Archlinux 3.6.6-1, without SSP This script exploit a stack based...

Microsoft Server Service Relative Path Stack Corruption

No description provided by source. $Id: ms08067netapi.rb 11614 2011-01-21 04:09:48Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...

VideoLAN VLC MKV Memory Corruption

No description provided by source. $Id: vlcwebm.rb 11725 2011-02-08 18:22:36Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...