CVE-2014-3309

Summary of CVE-2014-3309 (Cisco) : The NTP implementation in Cisco IOS and IOS XE is vulnerable due to improper handling of the ntp access-group command in a deny-all configuration, potentially allowing a remote attacker to bypass NTP access restrictions and query the NTP server configured to den...

PT-2014-5204

Name of the Vulnerable Software and Affected Versions Cisco IOS and IOS XE affected versions not specified Description The issue is related to the improper implementation of the ntp access-group command in certain Cisco IOS Software and Cisco IOS XE Software versions. This allows an...

CVE-2014-3309: Undefined Security Weakness

The NTP implementation in Cisco IOS and IOS XE does not properly support use of the access-group command for a "deny all" configuration, which allows remote attackers to bypass intended restrictions on time synchronization via a standard query, aka Bug ID CSCuj66318...

Absolute Form Processor XE-V 1.5 - Remote Change Pasword Exploit

No description provided by source. title Absolute Form Processor XE-V 1.5 Remote Change Pasword /title body bgcolor=FFFFFF text=000000 form name=form1 method=post action=http://www.xigla.com/absolutefp/demo/edituser.asp table width=96% border=0 cellspacing=2 cellpadding=2 align=center tr...

XIGLA Absolute Form Processor XE 1.5 'login.asp' SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/34463/info Absolute Form Processor XE is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker ...

Absolute Poll Manager XE 4.1 xlaapmview.asp Cross Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/25492/info Absolute Poll Manager XE is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. Exploiting this vulnerability may allow an attacker to perform cross-site...

CVE-2014-3290

The mDNS implementation in Cisco IOS XE 3.12S does not properly interact with autonomic networking, which allows remote attackers to obtain sensitive networking-services information by sniffing the network or overwrite networking-services data via a crafted mDNS response, aka Bug ID CSCun64867...

Information disclosure

The mDNS implementation in Cisco IOS XE 3.12S does not properly interact with autonomic networking, which allows remote attackers to obtain sensitive networking-services information by sniffing the network or overwrite networking-services data via a crafted mDNS response, aka Bug ID CSCun64867...

CVE-2014-3290

CVE-2014-3290 concerns Cisco IOS XE Software with Autonomic Networking Infrastructure. The mDNS implementation, used for autonomic networking, can be manipulated due to unconstrained mDNS interactions, allowing an unauthenticated, adjacent attacker to read or overwrite autonomic-networking servic...

CVE-2014-3290

The mDNS implementation in Cisco IOS XE 3.12S does not properly interact with autonomic networking, which allows remote attackers to obtain sensitive networking-services information by sniffing the network or overwrite networking-services data via a crafted mDNS response, aka Bug ID CSCun64867...

CVE-2014-3290: Undefined Security Weakness

The mDNS implementation in Cisco IOS XE 3.12S does not properly interact with autonomic networking, which allows remote attackers to obtain sensitive networking-services information by sniffing the network or overwrite networking-services data via a crafted mDNS response, aka Bug ID CSCun64867...

PT-2014-5185

Name of the Vulnerable Software and Affected Versions Cisco IOS XE version 3.12S Description The issue arises from the mDNS implementation not properly interacting with autonomic networking. This allows remote attackers to obtain sensitive networking-services information by sniffing the network o...

Cisco IOS XE Software PPPoE Denial of Service Vulnerability

A vulnerability in the PPP over Ethernet PPPoE processing code of Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause a reload of the affected device, which could lead to a denial of service DoS condition. The vulnerability is due to improper processing of certain...

Code injection

Cisco IOS XE on ASR1000 devices, when PPPoE termination is enabled, allows remote attackers to cause a denial of service device reload via a malformed PPPoE packet, aka Bug ID CSCuo55180...

CVE-2014-3284

Cisco IOS XE on ASR1000 devices with PPPoE termination enabled is vulnerable to a DoS via malformed PPPoE packets, causing a device reload. The issue stems from improper PPPoE processing and can be triggered remotely by an attacker in the same broadcast/collision domain. Multiple sources confirm ...

CVE-2014-3284: Improper Input Validation

Cisco IOS XE on ASR1000 devices, when PPPoE termination is enabled, allows remote attackers to cause a denial of service device reload via a malformed PPPoE packet, aka Bug ID CSCuo55180...

PT-2014-5180

Name of the Vulnerable Software and Affected Versions Cisco IOS XE on ASR1000 devices affected versions not specified Description The issue allows an unauthenticated, adjacent attacker to cause a reload of the affected device, leading to a denial of service DoS condition. This is due to improper...

CVE-2014-3269

Cisco IOS XE Software SNMP Denial of Service vulnerability (CVE-2014-3269) affects the SNMP module in IOS XE 3.5E. The issue arises from frequent polling of certain MIBs, which can allow an authenticated, remote attacker to cause a device reload (DoS) by sustained SNMP polling. Multiple connected...

CVE-2014-3269: Improper Input Validation

The SNMP module in Cisco IOS XE 3.5E allows remote authenticated users to cause a denial of service device reload by polling frequently, aka Bug ID CSCug65204...

PT-2014-5165

Name of the Vulnerable Software and Affected Versions Cisco IOS XE versions 3.5E Description A vulnerability in the SNMP module could allow an authenticated, remote attacker to cause a reload of the affected device by sending continuous SNMP polling requests, exploiting the issue of frequent...