Cisco Security Advisory: TACACS+ Authentication Bypass in Cisco Anomaly Detection and Mitigation Products

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: TACACS+ Authentication Bypass in Cisco Anomaly Detection and Mitigation Products Document ID: 69073 Advisory ID: cisco-SA-20060215-guard-auth http://www.cisco.com/warp/public/707/cisco-sa-20060215-guard.shtml Revision 1.0...

CVE-2005-4258

Unspecified Cisco Catalyst Switches allow remote attackers to cause a denial of service device crash via an IP packet with the same source and destination IPs and ports, and with the SYN flag set aka LanD. NOTE: the provenance of this issue is unknown; the details are obtained solely from the BID...

CVE-2005-4258

Unspecified Cisco Catalyst Switches allow remote attackers to cause a denial of service device crash via an IP packet with the same source and destination IPs and ports, and with the SYN flag set aka LanD. NOTE: the provenance of this issue is unknown; the details are obtained solely from the BID...

CVE-2005-4258

CVE-2005-4258 affects Cisco Catalyst Switches. A remote attacker can cause a device crash (DoS) by sending an IP packet where source and destination IPs/ports are identical and the SYN bit is set (LanD). The issue’s provenance is unknown and details originate from BIN/NVD entries. The NVD metrics...

Cisco Catalyst Switches (Multiple Devices) - LanD Packet Denial of Service

Cisco Catalyst Switches Multiple Devices - LanD Packet Denial of Service source: https://www.securityfocus.com/bid/15864/info Multiple unspecified Cisco Catalyst switches are prone to a denial of service vulnerability. These devices are susceptible to a remote denial of service vulnerability when...

security advisory - OpenVMPS

security advisory - OpenVMPS What is it? ----------- OpenVMPS is a substitute implementation of Cisco Virtual Membership Policy Server on Catalyst 65500 family of switches. It is used on Cisco LAN switces to dynamically assign ports to VLANs according to Ethernet Address. Because it was developed...

Planet switches backdor account

There is undocumented 'admin' account with 'ISPMODE' password...

CVE-2005-2487

CVE-2005-2487 affects Sun McData switches and directors 4300, 4500, 6064 and 6140 prior to E/OS 6.0.0. The vulnerability may allow a denial-of-service impacting connectivity and array access through a network broadcast storm. The provided documents indicate the affected components and the likely ...

CVE-2005-2487

Unknown vulnerability in Sun McData switches and directors 4300, 4500, 6064, and 6140 before E/OS 6.0.0 may allow attackers to cause a denial of service connectivity and array access loss via a network broadcast storm...

SUN McDATA switches broadcast storm

Device replyes to the packets with broadcast source address making it possible to DoS network with broadcast strom...

enterasys.txt

Problem Description An undocumented account with a default password exists, additionally guest users can DoS the switch. 2. Tested systems The following versions were tested and found vulnerable: Vertical Horizon VH-2402S with firmware 02.05.00 Vertical Horizon VH-2402S with firmware 02.05.09.07...

Enterasys Vertical Horizon switches backdoor accounts

There is undocumented backdoor account tiger/tiger123, in addition some privileged control character combination are available to unprivileged user from console or telnet session...

CVE-2005-1942

Cisco switches that support 802.1x security are affected by CVE-2005-1942, where remote attackers can bypass port security and access the VLAN by spoofing Cisco Discovery Protocol (CDP) messages. The vulnerability arises from CDP message spoofing enabling bypass of port security, enabling partial...

CVE-2005-1942

Cisco switches that support 802.1x security allow remote attackers to bypass port security and gain access to the VLAN via spoofed Cisco Discovery Protocol CDP messages...

Cisco switches protected Voice VLANs protection bypass

Malformed CDP Cisco discovery protocol message opens access to voice VLAN from data VLAN...

CVE-2005-1942

Cisco switches that support 802.1x security allow remote attackers to bypass port security and gain access to the VLAN via spoofed Cisco Discovery Protocol CDP messages...

CVE-2005-1670

Unknown vulnerability in Extreme BlackDiamond 10808 and 8800 switches running ExtremeWare XOS 11.1 before 11.1.3.3, 11.0 before 11.0.2.4, and 10.x allows remote authenticated users to execute arbitrary commands...

[SA15393] Cisco Various Products TCP Timestamp Denial of Service

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

ExtremeWare network switches privilege escalation

No description provided...

Extreme Networks switches with ExtremeWare XOS allow arbitrary command execution

Overview Some Extreme Networks switches running ExtremeWare XOS have a vulnerability that allows a malicious authenticated user to escape to the underlying operating system command shell with administrator-level root privileges. Description Extreme Network switches running ExtremeWare XOS contain...