CVE-2013-6975

Directory traversal vulnerability in the command-line interface in Cisco NX-OS 6.22a and earlier allows local users to read arbitrary files via unspecified input, aka Bug ID CSCul05217...

CVE-2013-6975

CVE-2013-6975 describes a directory traversal vulnerability in the Cisco NX-OS CLI. Affected software is Cisco NX-OS 6.2(2a) and earlier. The issue allows an authenticated, local user to read arbitrary files on the device via unspecified input. Multiple connected advisories reiterate the same cor...

PT-2014-3238

Name of the Vulnerable Software and Affected Versions Cisco NX-OS versions 6.22a and earlier Description A directory traversal issue in the command-line interface allows local users to read arbitrary files via unspecified input. Recommendations For Cisco NX-OS versions 6.22a and earlier, at the...

CVE-2013-6975: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the command-line interface in Cisco NX-OS 6.22a and earlier allows local users to read arbitrary files via unspecified input, aka Bug ID CSCul05217...

CVE-2014-0684

Cisco NX-OS 6.22 on Nexus 7000 switches allows local users to cause a denial of service via crafted sed input, aka Bug ID CSCui56136...

Code injection

Cisco NX-OS 6.22 on Nexus 7000 switches allows local users to cause a denial of service via crafted sed input, aka Bug ID CSCui56136...

CVE-2014-0684

Cisco NX-OS 6.22 on Nexus 7000 switches allows local users to cause a denial of service via crafted sed input, aka Bug ID CSCui56136...

CVE-2014-0684

Cisco NX-OS 6.2(2) on Nexus 7000 switches is affected by CVE-2014-0684. The vulnerability enables a local attacker to trigger a denial-of-service condition by supplying crafted input to the sed command, due to improper input validation (Bug CSCui56136). Impact per sources is local DoS with the po...

CVE-2014-0684: Improper Input Validation

Cisco NX-OS 6.22 on Nexus 7000 switches allows local users to cause a denial of service via crafted sed input, aka Bug ID CSCui56136...

PT-2014-3779

Name of the Vulnerable Software and Affected Versions Cisco NX-OS version 6.22 Description A denial of service condition can be caused by an authenticated, local attacker on affected devices due to an error in input validation for the sed command. The attacker could exploit this by passing crafte...

Cisco Nexus 7000 Denial of Service Vulnerability (Cisco-SA-20140506-CVE-2014-0684)

A vulnerability in Cisco Nexus 7000 Series Switches could allow an authenticated, local attacker to cause a denial of service DoS condition on an affected device. Copyright C 2014 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by t...

CVE-2014-0892

IBM Notes and Domino 8.5.x before 8.5.3 FP6 IF3 and 9.x before 9.0.1 FP1 on 32-bit Linux platforms use incorrect gcc options, which makes it easier for remote attackers to execute arbitrary code by leveraging the absence of the NX protection mechanism and placing crafted x86 code on the stack, ak...

Code injection

IBM Notes and Domino 8.5.x before 8.5.3 FP6 IF3 and 9.x before 9.0.1 FP1 on 32-bit Linux platforms use incorrect gcc options, which makes it easier for remote attackers to execute arbitrary code by leveraging the absence of the NX protection mechanism and placing crafted x86 code on the stack, ak...

CVE-2014-0892

IBM Notes and Domino 8.5.x before 8.5.3 FP6 IF3 and 9.x before 9.0.1 FP1 on 32-bit Linux platforms use incorrect gcc options, which makes it easier for remote attackers to execute arbitrary code by leveraging the absence of the NX protection mechanism and placing crafted x86 code on the stack, ak...

CVE-2014-0892: Exposure of Sensitive Information to an Unauthorized Actor

IBM Notes and Domino 8.5.x before 8.5.3 FP6 IF3 and 9.x before 9.0.1 FP1 on 32-bit Linux platforms use incorrect gcc options, which makes it easier for remote attackers to execute arbitrary code by leveraging the absence of the NX protection mechanism and placing crafted x86 code on the stack, ak...

PT-2014-3925

Name of the Vulnerable Software and Affected Versions IBM Notes and Domino versions 8.5.x through 8.5.3 FP6 IF2 and versions 9.x through 9.0.1 Description The issue arises from incorrect gcc options used in IBM Notes and Domino, which makes it easier for remote attackers to execute arbitrary code...

IBM Notes and Domino on x86 Linux specify an executable stack

Overview IBM Notes and Domino on x86 Linux are incorrectly built requesting an executable stack. This can make it easier for attackers to exploit vulnerabilities in Notes, Domino, and any of the child processes that they may spawn. Description The build environment for the x86 Linux versions of I...

Python - socket.recvfrom_into() Remote Buffer Overflow

Python - socket.recvfrominto Remote Buffer Overflow !/usr/bin/env python ''' Exploit Title: python socket.recvfrominto remote buffer overflow Date: 21/02/2014 Exploit Author: @sha0coder Vendor Homepage: python.org Version: python2.7 and python3 Tested on: linux 32bit + python2.7 CVE : CVE-2014-19...

Python socket.recvfrom_into() remote buffer overflow exploit

Proof of concept, that demonstrated the remote exploitability of this python socket flaw, if the python code uses recvfrominto unsafelly. To avoid NX, ret2libc can be used thanx to !/usr/bin/env python ''' Exploit Title: python socket.recvfrominto remote buffer overflow Date: 21/02/2014 Exploit...

Cisco NX-OS Software Label Distribution Protocol Message Vulnerability

A vulnerability in the Label Distribution Protocol LDP message processing of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause an affected device to stop accepting valid LDP sessions during a 60-second period. The vulnerability is due to how certain malformed LDP Hello...