Cisco TelePresence Multipoint Switch XML-RPC DoS (cisco-sa-20110223-telepresence-ctms)

According to its self-reported version number, the version of Cisco TelePresence Multipoint Switch running on the remote host has a denial of service vulnerability. Sending a malicious XML-RPC request to TCP port 9000 could crash the call geometry process. A remote, unauthenticated attacker could...

Cisco TelePresence Multipoint Switch Web Detection

The remote host is operating as a Cisco TelePresence Multipoint Switch CTMS, a network infrastructure component used in videoconferencing. The web management application for CTMS was detected on this host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid60138;...

CVE-2012-2974

The web interface on the SMC SMC8024L2 switch allows remote attackers to bypass authentication and obtain administrative access via a direct request to a .html file under 1 status/, 2 system/, 3 ports/, 4 trunks/, 5 vlans/, 6 qos/, 7 rstp/, 8 dot1x/, 9 security/, 10 igmps/, or 11 snmp/...

Authentication flaw

The web interface on the SMC SMC8024L2 switch allows remote attackers to bypass authentication and obtain administrative access via a direct request to a .html file under 1 status/, 2 system/, 3 ports/, 4 trunks/, 5 vlans/, 6 qos/, 7 rstp/, 8 dot1x/, 9 security/, 10 igmps/, or 11 snmp/...

CVE-2012-2974

The web interface on the SMC SMC8024L2 switch allows remote attackers to bypass authentication and obtain administrative access via a direct request to a .html file under 1 status/, 2 system/, 3 ports/, 4 trunks/, 5 vlans/, 6 qos/, 7 rstp/, 8 dot1x/, 9 security/, 10 igmps/, or 11 snmp/...

CVE-2012-2974

The CVE-2012-2974 vulnerability affects the SMC Networks SMC8024L2 switch web interface. An unauthenticated, remote attacker can bypass login by requesting a direct URL to a .html file under one of these paths: status/, system/, ports/, trunks/, vlans/, qos/, rstp/, dot1x/, security/, igmps/, or ...

PT-2012-4406

Name of the Vulnerable Software and Affected Versions SMC SMC8024L2 switch affected versions not specified Description The issue allows remote attackers to bypass authentication and gain administrative access to the web interface of the switch. This can be achieved by making a direct request to...

CVE-2012-3073

The CVE-2012-3073 issue affects Cisco TelePresence products via the IP stack: TelePresence Multipoint Switch (before 1.8.1), TelePresence Manager (before 1.9.0), and TelePresence Recording Server (1.8 and earlier). The vulnerability allows remote attackers to trigger a DoS (network outage or proc...

SMC Networks SMC8024L2 Switch Web Interface Authentication Bypass Vulnerability

The SMC Networks SMC8024L2 switch is prone to a remote authentication- bypass vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

SMC Networks SMC8024L2 Switch Web Interface Authentication Bypass Vulnerability

The SMC Networks SMC8024L2 switch is prone to a remote authentication- bypass vulnerability. An attacker can exploit this issue to gain unauthorized administrative access to all configuration pages to affected devices. OpenVAS Vulnerability Test $Id: gbsmc8024l254390.nasl 8654 2018-02-05 08:19:22...

CVE-2012-3073: Undefined Security Weakness

The IP implementation on Cisco TelePresence Multipoint Switch before 1.8.1, Cisco TelePresence Manager before 1.9.0, and Cisco TelePresence Recording Server 1.8 and earlier allows remote attackers to cause a denial of service networking outage or process crash via 1 malformed IP packets, 2 a high...

PT-2012-4465

Name of the Vulnerable Software and Affected Versions Cisco TelePresence Multipoint Switch versions prior to 1.8.1 Cisco TelePresence Manager versions prior to 1.9.0 Cisco TelePresence Recording Server version 1.8 and earlier Description The issue allows remote attackers to cause a denial of...

PT-2012-4060

Name of the Vulnerable Software and Affected Versions Cisco TelePresence Multipoint Switch versions prior to 1.9.0 Cisco TelePresence Immersive Endpoint Devices versions prior to 1.9.1 Cisco TelePresence Manager versions prior to 1.9.0 Cisco TelePresence Recording Server versions prior to 1.8.1...

CVE-2012-2486: Improper Control of Generation of Code

The Cisco Discovery Protocol CDP implementation on Cisco TelePresence Multipoint Switch before 1.9.0, Cisco TelePresence Immersive Endpoint Devices before 1.9.1, Cisco TelePresence Manager before 1.9.0, and Cisco TelePresence Recording Server before 1.8.1 allows remote attackers to execute...

Multiple Vulnerabilities in Cisco TelePresence Multipoint Switch

Cisco TelePresence Multipoint Switch contains the following vulnerabilities: Cisco TelePresence Malformed IP Packets Denial of Service Vulnerability Cisco TelePresence Cisco Discovery Protocol Remote Code Execution Vulnerability Exploitation of the Cisco TelePresence Malformed IP Packets Denial o...

SMC SMC8024L2 switch web interface authentication bypass

Overview The SMC8024L2 switch does not require authentication for the web interface configuration pages if they are visited with a direct URL. Description The SMC8024L2 switch does not require authentication for the web interface configuration pages if they are visited with a direct URL. An...

python-wrapper - Untrusted Search PathCode Execution

python-wrapper - Untrusted Search PathCode Execution python-wrapper untrusted search path/code execution vulnerability Python-wrapper executes any test.py script within the current working directory, when supplied with help'modules'. A non-priviledged user may gain code execution by tricking root...

PT-2012-4209

Name of the Vulnerable Software and Affected Versions filedepot module versions 6.x-1.x before 6.x-1.3 for Drupal Description The issue affects the filedepot module for Drupal. When accessed using multiple different browsers from the same IP address, it causes Internet Explorer sessions to switch...

Cisco Security Advisory: Cisco IOS XR Software Route Processor Denial of Service Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Cisco IOS XR Software Route Processor Denial of Service Vulnerability Advisory ID: cisco-sa-20120530-iosxr Revision 1.0 For Public Release 2012 May 30 16:00 UTC GMT +--------------------------------------------------------------------- Summary =====...

Apple Legacy filevault barn door...

As someone said here recently, carefully built crypto has a unfortunate tendency to consist of three thick impregnable walls and a picket fence in the back with the gate left open. That seems to have happened to Apple's older "legacy" Filevault in the current release of MacOX Lion 10.7.3...