CVE-2012-4097

The BGP implementation in Cisco NX-OS does not properly filter segment types in AS paths, which allows remote attackers to cause a denial of service BGP service reset via a malformed UPDATE message, aka Bug ID CSCtn13043...

CVE-2012-4121

Cisco NX-OS allows local users to gain privileges, and read or modify arbitrary files, via the sed 1 r and 2 w commands, aka Bug IDs CSCts56559, CSCts56565, CSCts56570, and CSCts56574...

CVE-2012-4077

Cisco NX-OS Software contains a vulnerability (CVE-2012-4077) due to improper filtering of parameters passed to the sed -e option. An authenticated, local attacker can exploit this to gain access to the bash shell and execute arbitrary commands with administrative privileges, effectively enabling...

CVE-2012-4121

Cisco NX-OS contains a local-privilege-escalation flaw in the Stream Editor (sed) usage via the r and w commands. The issue is tied to input-validation problems, enabling an authenticated, local attacker to read or modify arbitrary files on the device. Documents reference Bug IDs CSCts56559, CSCt...

CVE-2012-4097

CVE-2012-4097 affects Cisco NX-OS BGP: the BGP implementation does not properly filter segment types in AS paths, allowing remote attackers to trigger a denial of service (BGP service reset) via a malformed UPDATE message (Bug CSCtn13043). This is documented across multiple sources (NVD, Red Hat ...

CVE-2012-4077

Cisco NX-OS allows local users to gain privileges and execute arbitrary commands via the sed e option, aka Bug IDs CSCtf25457 and CSCtf27651...

CVE-2012-4076

Cisco NX-OS allows local users to gain privileges and execute arbitrary commands via shell metacharacters in a command that calls the system library function, aka Bug IDs CSCtf23559 and CSCtf27780...

CVE-2012-4099

Cisco NX-OS BGP implementation vulnerability CVE-2012-4099 allows remote attackers to trigger a denial of service (BGP service reset and resync) by sending a malformed UPDATE message due to improper AS-path filtering (Bug CSCtn13065). Affected component is the BGP/AS-path processing in NX-OS; imp...

CVE-2012-4099

The BGP implementation in Cisco NX-OS does not properly filter AS paths, which allows remote attackers to cause a denial of service BGP service reset and resync via a malformed UPDATE message, aka Bug ID CSCtn13065...

CVE-2012-4076

CVE-2012-4076 affects Cisco NX-OS with a local-privilege escalation via shell metacharacters in a call to the system() library function. The issue arises from improper input handling during command processing (Bug IDs CSCtf23559 and CSCtf27780). Public sources describe that an authenticated, loca...

CVE-2012-4097: Improper Input Validation

The BGP implementation in Cisco NX-OS does not properly filter segment types in AS paths, which allows remote attackers to cause a denial of service BGP service reset via a malformed UPDATE message, aka Bug ID CSCtn13043...

CVE-2012-4077: Undefined Security Weakness

Cisco NX-OS allows local users to gain privileges and execute arbitrary commands via the sed e option, aka Bug IDs CSCtf25457 and CSCtf27651...

CVE-2012-4121: Undefined Security Weakness

Cisco NX-OS allows local users to gain privileges, and read or modify arbitrary files, via the sed 1 r and 2 w commands, aka Bug IDs CSCts56559, CSCts56565, CSCts56570, and CSCts56574...

CVE-2012-4076: Improper Input Validation

Cisco NX-OS allows local users to gain privileges and execute arbitrary commands via shell metacharacters in a command that calls the system library function, aka Bug IDs CSCtf23559 and CSCtf27780...

CVE-2012-4099: Improper Input Validation

The BGP implementation in Cisco NX-OS does not properly filter AS paths, which allows remote attackers to cause a denial of service BGP service reset and resync via a malformed UPDATE message, aka Bug ID CSCtn13065...

PT-2013-1637

Name of the Vulnerable Software and Affected Versions Cisco NX-OS affected versions not specified Description The issue is related to the BGP implementation, which does not properly filter segment types in AS paths. This allows remote attackers to cause a denial of service, specifically a BGP...

PT-2013-1639

Name of the Vulnerable Software and Affected Versions Cisco NX-OS affected versions not specified Description The issue is related to the BGP implementation, which does not properly filter AS paths. This allows remote attackers to cause a denial of service, resulting in a BGP service reset and...

Cisco Nexus 7000 Series Switches Remote Denial of Service Vulnerability

Cisco Nexus 7000 Series switches running on NX-OS are prone to a remote denial-of-service vulnerability. Copyright C 2013 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Cisco NX-OS Malformed IP Packet Denial of Service Vulnerability (cisco-sa-20120215-nxos)

Cisco NX-OS Software is affected by a denial of service DoS vulnerability that could cause Cisco Nexus 1000v, 1010, 5000, and 7000 Series Switches, and the Cisco Virtual Security Gateway VSG for Nexus 1000V Series Switches, that are running affected versions of Cisco NX-OS Software to reload when...

Cisco NX-OS Software Input Validation Vulnerability

A vulnerability in the input parsing of Cisco NX-OS Software could allow an unauthenticated, local attacker to execute commands on the underlying operating system. The vulnerability is due to poor processing of parameters that include special characters. An attacker could exploit this vulnerabili...