Security Advisory: Content Service Switch HTTP Processing Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Cisco Security Advisory: Content Service Switch HTTP Processing Vulnerabilities Revision 1.0: INTERIM For Public Release 2002 May 15 18:00 GMT - ------------------------------------------------------------------------------- Please provide your feedback on this...

Cisco Content Service Switch DoS

Malfromed POST request to web managment interface can cause device to reboot...

Content Service Switch Web Management HTTP Processing Vulnerabilities

...

DNSTools 2.0 - Authentication Bypass

source: https://www.securityfocus.com/bid/4617/info DNSTools is a web based managment tool for DNS information. It is implemented in PHP, and available for Linux and Solaris. A vulnerability has been reported in some versions of DNSTools which allows any remote attacker to gain administrative...

Blahz-DNS 0.2 - Direct Script Call Authentication Bypass

source: https://www.securityfocus.com/bid/4618/info Blahz-DNS is a web based management tool for DNS information. It is implemented in PHP, and available for Linux systems. By directly calling scripts included with Blahz-DNS, it is possible to bypass the authentication check, gaining full access ...

CVE-2001-0622

The web management service on Cisco Content Service series 11000 switches CSS before WebNS 4.01B29s or WebNS 4.10B17s allows a remote attacker to gain additional privileges by directly requesting the web management URL instead of navigating through the interface...

CVE-2001-0622

The web management service on Cisco Content Service series 11000 switches CSS before WebNS 4.01B29s or WebNS 4.10B17s allows a remote attacker to gain additional privileges by directly requesting the web management URL instead of navigating through the interface...

Cisco Content Service Switch 11000 Series Web Management Vulnerability

...

CVE-2001-0056

The Cisco Web Management interface in routers running CBOS 2.4.1 and earlier does not log invalid logins, which allows remote attackers to guess passwords without detection...

CVE-2001-0056

The CVE-2001-0056 entry concerns the Cisco CBOS Web Management interface. Affected software: CBOS 2.4.1 and earlier. Description: the Web Management interface does not log invalid login attempts, enabling remote attackers to guess passwords without detection. Impact: partial confidentiality and i...

CVE-2001-0270

Marconi ASX-1000 ASX switches allow remote attackers to cause a denial of service in the telnet and web management interfaces via a malformed packet with the SYN-FIN and More Fragments attributes set...

CVE-2001-0270

Marconi ASX-1000 ASX switches allow remote attackers to cause a denial of service in the telnet and web management interfaces via a malformed packet with the SYN-FIN and More Fragments attributes set...