Lenovo Patches Networking OS Vulnerability Dating Back to 2004

Lenovo patched a flaw in its networking operating system dating back to 2004 that allowed attackers to perform an authentication bypass attack via a mechanism called “HP Backdoor.” If exploited, an attacker could gain admin-level access on affected switches, Lenovo said. The vulnerability is rate...

How to Configure NetScaler MAS for readonly access via TACACS using Cisco ACS

Configure NetScaler MAS and Cisco ACS to provide readonly access to users for MAS...

The vulnerability of Cisco PIX software allows a malicious individual to trigger a service failure.

Overloading the buffer in the Cisco PIX Firewall allows malicious actors operating remotely to trigger service failures by using authentication for HTTP traffic via TACACS+ or RADIUS...

Cisco NX-OS Software TACACS+ Command Authorization Vulnerability (Cisco-SA-20150202-CVE-2014-8013)

A vulnerability in the TACACS+ command authorization feature of Cisco NX-OS Software could allow an authenticated, local attacker to cause the system to reset. Copyright C 2016 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

CVE-2015-6334

Cisco ASR 5000 and 5500 devices with software 18.0.0.57828 and 19.0.M0.61045 allow remote attackers to cause a denial of service vpnmgr process restart via a crafted header in a TACACS packet, aka Bug ID CSCuw01984...

Design/Logic Flaw

Cisco ASR 5000 and 5500 devices with software 18.0.0.57828 and 19.0.M0.61045 allow remote attackers to cause a denial of service vpnmgr process restart via a crafted header in a TACACS packet, aka Bug ID CSCuw01984...

CVE-2015-6334

Cisco ASR 5000 and 5500 devices with software 18.0.0.57828 and 19.0.M0.61045 allow remote attackers to cause a denial of service vpnmgr process restart via a crafted header in a TACACS packet, aka Bug ID CSCuw01984...

CVE-2015-6334

The CVE-2015-6334 issue affects Cisco ASR 5000 and ASR 5500 systems running software 18.0.0.57828 and 19.0.M0.61045. A crafted TACACS header in a TACACS packet can trigger the vpnmgr process to restart, causing a denial of service. The root cause is improper input validation of the TACACS packet ...

Cisco ASR 5000 and ASR 5500 TACACS Denial of Service Vulnerability

A vulnerability in the TACACS protocol implementation of the Cisco Aggregation Services Router ASR 5000 and ASR 5500 ASR5K System Software could allow an unauthenticated, remote attacker to cause a partial denial of service DoS condition because the vpnmgr process restarts. The vulnerability is...

CVE-2015-0607

The Authentication Proxy feature in Cisco IOS does not properly handle invalid AAA return codes from RADIUS and TACACS+ servers, which allows remote attackers to bypass authentication in opportunistic circumstances via a connection attempt that triggers an invalid code, as demonstrated by a...

Authentication flaw

The Authentication Proxy feature in Cisco IOS does not properly handle invalid AAA return codes from RADIUS and TACACS+ servers, which allows remote attackers to bypass authentication in opportunistic circumstances via a connection attempt that triggers an invalid code, as demonstrated by a...

CVE-2015-0607

The CVE-2015-0607 issue affects Cisco IOS Authentication Proxy by mishandling unsupported AAA return codes from RADIUS/TACACS+ servers, enabling a remote attacker to bypass authentication (e.g., with a blank password). The root cause is improper processing of invalid AAA codes by the Authenticati...

CVE-2015-0607

The Authentication Proxy feature in Cisco IOS does not properly handle invalid AAA return codes from RADIUS and TACACS+ servers, which allows remote attackers to bypass authentication in opportunistic circumstances via a connection attempt that triggers an invalid code, as demonstrated by a...

Unspecified Vulnerability in Cisco IOS Authentication Proxy Function

Cisco IOS is an operating system developed by Cisco for its network devices. A security vulnerability exists in the Authentication Proxy feature of Cisco IOS, which stems from the program's failure to properly handle invalid Authentication, Authorization, and Accounting AAA return codes originati...

Cisco ASA Challenge-Response Tunnel Group Selection Bypass Vulnerability

A vulnerability in the authentication code of Cisco ASA Software could allow an authenticated, remote attacker to access resources of a VPN tunnel group. The vulnerability is due to improper implementation of the tunnel group selection when a user authenticates to the remote access VPN via the...

CVE-2014-8013

The TACACS+ command-authorization implementation in Cisco NX-OS allows local users to cause a denial of service device reload via a long CLI command, aka Bug ID CSCur54182...

Authorization

The TACACS+ command-authorization implementation in Cisco NX-OS allows local users to cause a denial of service device reload via a long CLI command, aka Bug ID CSCur54182...

CVE-2014-8013

The TACACS+ command-authorization implementation in Cisco NX-OS allows local users to cause a denial of service device reload via a long CLI command, aka Bug ID CSCur54182...

CVE-2014-8013

CVE-2014-8013 concerns Cisco NX-OS TACACS+ command authorization where an authenticated, local attacker can cause a device reload by submitting very long CLI commands. The root cause is improper processing of long CLI inputs in the TACACS+ command-authorization feature. Impact is denial of servic...

Cisco NX-OS Software TACACS+ Command Authorization Vulnerability

A vulnerability in the TACACS+ command authorization feature of Cisco NX-OS Software could allow an authenticated, local attacker to cause the system to reset. The vulnerability is due to incorrect processing of very long command-line interface CLI commands by the TACACS+ command authorization...