PT-2011-2309

Name of the Vulnerable Software and Affected Versions Cisco TelePresence Multipoint Switch CTMS versions 1.0.x through 1.6.x Description The administrative web interface on CTMS devices allows remote authenticated users to cause a denial of service or have unspecified other impact via vectors...

CVE-2011-0384: Improper Authentication

The Java Servlet framework on Cisco TelePresence Multipoint Switch CTMS devices with software 1.0.x, 1.1.x, 1.5.x, and 1.6.x does not require administrative authentication for unspecified actions, which allows remote attackers to execute arbitrary code via a crafted request, aka Bug ID CSCtf01253...

PT-2011-2306

Name of the Vulnerable Software and Affected Versions Cisco TelePresence Multipoint Switch CTMS versions 1.0.x through 1.6.x Description The Java Servlet framework does not require administrative authentication for certain actions, allowing remote attackers to execute arbitrary code via a crafted...

PT-2011-2312

Name of the Vulnerable Software and Affected Versions Cisco TelePresence Multipoint Switch CTMS versions 1.0.x through 1.7.0 Description The issue concerns the XML-RPC implementation, which allows remote attackers to cause a denial of service by sending a crafted request, resulting in a process...

PT-2011-2311

Name of the Vulnerable Software and Affected Versions Cisco TelePresence Multipoint Switch CTMS versions 1.0.x through 1.6.x Description The issue allows remote attackers to cause a denial of service, resulting in a process crash, by sending a crafted Real-Time Transport Control Protocol RTCP UDP...

CVE-2011-0388: Undefined Security Weakness

Cisco TelePresence Recording Server devices with software 1.6.x and Cisco TelePresence Multipoint Switch CTMS devices with software 1.0.x, 1.1.x, 1.5.x, and 1.6.x do not properly restrict remote access to the Java servlet RMI interface, which allows remote attackers to cause a denial of service...

CVE-2011-0387: Undefined Security Weakness

The administrative web interface on Cisco TelePresence Multipoint Switch CTMS devices with software 1.0.x, 1.1.x, 1.5.x, and 1.6.x allows remote authenticated users to cause a denial of service or have unspecified other impact via vectors involving access to a servlet, aka Bug ID CSCtf97164...

PT-2011-2305

Name of the Vulnerable Software and Affected Versions Cisco TelePresence Recording Server versions 1.6.x before 1.6.2 Cisco TelePresence Multipoint Switch CTMS versions 1.0.x, 1.1.x, 1.5.x, and 1.6.x Description The Java Servlet framework does not require administrative authentication for certain...

Multiple Vulnerabilities in Cisco TelePresence Multipoint Switch

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

(0Day) IBM Lotus Notes cai URI Handler Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IBM Lotus Notes. User interaction is required to exploit this vulnerability. The specific flaw exists within the handling of malformed strings within cai:// URIs. The '--launcher.library' switch ca...

Amid Protests, Egypt Severs Ties to Internet

Amidst growing popular protests, Egypt has been severed from the Internet, according to reports from Intenet monitors and reporters within the country. The Associated Press and Reuters both confirmed reports of widespread outtages within Egypt affecting customers of all of the country’s main ISPs...

Cisco Security Advisory: Cisco Content Services Gateway Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Cisco Security Advisory: Cisco Content Services Gateway Vulnerabilities Advisory ID: cisco-sa-20110126-csg2 http://www.cisco.com/warp/public/707/cisco-sa-20110126-csg2.shtml Revision 1.0 For Public Release 2011 January 26 1600 UTC GMT...

Digital Forensics Framework v0.9.0 latest version download !

"DFF Digital Forensics Framework is a simple but powerful tool with a flexible module system which will help you in your digital forensics works, including file recovery due to error or crash, evidence research and analysis, etc. DFF provides a robust architecture and some handy modules." This is...

New Intel Chips Support SMS Kill Switch

HED: New Intel Chips Support SMS Kill Switch DEK: Anti Theft 3 Chips Can be disabled via 3G Networks New computer processors from Intel Corp, due out in 2011, can be disabled using an SMS “poison pill” message sent over any 3G cellular network, according to Intel documentation. The new anti-theft...

Multiple Switch Vendors '__super' Account Backdoor

Nessus was able to log into the remote host as the 'super' user and a password based on the switch's MAC address. This is likely a built-in account that cannot be disabled and whose password cannot be changed. A remote attacker with knowledge of this switch's MAC address could exploit this by...

Cisco IOS HTTP Server Vulnerability - Cisco Systems

A defect in multiple releases of Cisco IOS software will cause a Cisco router or switch to halt and reload if the IOS HTTP service is enabled and browsing to "http:///%%" is attempted. This defect can be exploited to produce a denial of service DoS attack. This defect has been discussed on public...

Vulnerability in Cisco IOS with OSPF, MPLS VPN, and Supervisor 32, Supervisor 720, or Route Switch Processor 720

Certain Cisco Catalyst 6500 Series and Cisco 7600 Router devices that run branches of Cisco IOS based on 12.2 can be vulnerable to a denial of service vulnerability that can prevent any traffic from entering an affected interface. For a device to be vulnerable, it must be configured for Open...

Cisco 6000/6500/7600 Crafted Layer 2 Frame Vulnerability - Cisco Systems

A layer 2 frame as defined in the Open System Interconnection Reference Model that is encapsulating a layer 3 packet IP, IPX, etc. may cause Cisco 6000/6500/7600 series systems with Multilayer Switch Feature Card 2 MSFC2 that have a FlexWAN or Optical Services Module OSM or that run 12.18bE14 to...

Cisco IOS HTTP Server Query Vulnerability - Cisco Systems

A defect in multiple releases of Cisco IOS software will cause a Cisco router or switch to halt and reload if the IOS HTTP service is enabled, browsing to "http://router-ip/anytext?/" is attempted, and the enable password is supplied when requested. This defect can be exploited to produce a denia...

Code injection

Unspecified vulnerability on the HP ProCurve 1800-24G switch with software PB.03.02 and earlier, and the ProCurve 1800-8G switch with software PA.03.02 and earlier, when SNMP is enabled, allows remote attackers to obtain sensitive information via unknown vectors...