224 matches found
HP-UX Update for AAA Server HPSBUX00286
Check for the Version of AAA Server OpenVAS Vulnerability Test HP-UX Update for AAA Server HPSBUX00286 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
HP-UX Update for AAA Server HPSBUX01011
Check for the Version of AAA Server OpenVAS Vulnerability Test HP-UX Update for AAA Server HPSBUX01011 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
Nokia Siemens FlexiISN GGSN Authentication Bypass
NOKIA Siemens FlexiISN GGSN Multiple Authentication bypass Vulnerability: NOKIA Siemens FlexiISN Remote: Yes Local: No Class: Input Validation Error Critical: Moderately critical OS : FlexiISN GGSN FISN 3.1 URL 1 for bypassing authentication on AAA Configuration: http://Flexi-ISN...
Nokia Siemens FlexiISN 3.1 Multiple Auth Bypass Vulnerabilities
Exploit for hardware platform in category remote exploits =============================================================== NOKIA Siemens FlexiISN 3.1 Multiple Auth Bypass Vulnerabilities =============================================================== NOKIA Siemens FlexiISN GGSN Multiple...
CVE-2007-4786
Cisco Adaptive Security Appliance ASA running PIX 7.0 before 7.0.7.1, 7.1 before 7.1.2.61, 7.2 before 7.2.2.34, and 8.0 before 8.0.2.11, when AAA is enabled, composes %ASA-5-111008 messages from the "test aaa" command with cleartext passwords and sends them over the network to a remote syslog...
Command injection
Cisco Adaptive Security Appliance ASA running PIX 7.0 before 7.0.7.1, 7.1 before 7.1.2.61, 7.2 before 7.2.2.34, and 8.0 before 8.0.2.11, when AAA is enabled, composes %ASA-5-111008 messages from the "test aaa" command with cleartext passwords and sends them over the network to a remote syslog...
PT-2007-5926 · Cisco · Cisco Asa
Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA versions 7.0 through 7.0.7.1 Cisco Adaptive Security Appliance ASA versions 7.1 through 7.1.2.61 Cisco Adaptive Security Appliance ASA versions 7.2 through 7.2.2.34 Cisco Adaptive Security Appliance ASA...
Cisco Adaptive Security Appliance insecurely logs passwords
Overview The Cisco Adaptive Security Appliance ASA firewall may log user credentials, including passwords, as plain text when AAA authentication is enabled. Description The Cisco Adapative Security Appliance ASA is a firewall with Intrusion Protection System IPS, Stateful Packet Inspection SPI, a...
Cisco PIX and ASA authentication bypass vulnerability
Overview The Cisco ASA and PIX firewalls contain an authentication bypass vulnerability. This vulnerability may allow a remote attacker to gain unauthorized access to the internal network or firewall. Description The Cisco Adaptive Security Appliance ASA is firewall that includes routing and...
CVE-2006-0764
The Authentication, Authorization, and Accounting AAA capability in versions 5.01 and 5.03 of the software used by multiple Cisco Anomaly Detection and Mitigation products, when running with an incomplete TACACS+ configuration without a "tacacs-server host" command, allows remote attackers to...
CVE-2006-0764
The CVE-2006-0764 entry affects Cisco Anomaly Detection and Mitigation products running versions 5.0(1) and 5.0(3). The underlying issue is an incomplete TACACS+ configuration (missing tacacs-server host), which allows remote attackers to bypass authentication and gain privileges. This is tied to...
Cisco Security Advisory: TACACS+ Authentication Bypass in Cisco Anomaly Detection and Mitigation Products
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: TACACS+ Authentication Bypass in Cisco Anomaly Detection and Mitigation Products Document ID: 69073 Advisory ID: cisco-SA-20060215-guard-auth http://www.cisco.com/warp/public/707/cisco-sa-20060215-guard.shtml Revision 1.0...
Authorization
Certain Cisco IOS releases in 12.2S based trains with maintenance release number 25 and later, 12.3T based trains, and 12.4 based trains reuse a Tcl Shell process across login sessions of different local users on the same terminal if the first user does not use tclquit before exiting, which may...
CVE-2006-0486
Certain Cisco IOS releases in 12.2S based trains with maintenance release number 25 and later, 12.3T based trains, and 12.4 based trains reuse a Tcl Shell process across login sessions of different local users on the same terminal if the first user does not use tclquit before exiting, which may...
CVE-2006-0485
CVE-2006-0485 affects Cisco IOS TCL/CLI: the TCL shell does not perform AAA command authorization checks, potentially allowing local users to bypass AAA and execute IOS EXEC commands prohibited by configuration (Bug CSCeh73049). Affected Cisco IOS versions include 12.2(14)S before 12.2(14)S16 and...
CVE-2006-0485
The TCL shell in Cisco IOS 12.214S before 12.214S16, 12.218S before 12.218S11, and certain other releases before 25 January 2006 does not perform Authentication, Authorization, and Accounting AAA command authorization checks, which may allow local users to execute IOS EXEC commands that were...
CVE-2005-2105
Cisco IOS 12.2T through 12.4 allows remote attackers to bypass Authentication, Authorization, and Accounting AAA RADIUS authentication, if the fallback method is set to none, via a long username...
CVE-2005-2105
CVE-2005-2105 : Affects Cisco IOS 12.2T through 12.4. A faulty RADIUS implementation allows remote attackers to bypass AAA RADIUS authentication when the fallback method is set to none by using a long username. This is a remote authentication bypass taking advantage of the none fallback configura...
CVE-2001-1000
The CVE-2001-1000 issue affects Merit AAA Server’s rlmadmin RADIUS management utility (versions including 3.8M and 5.01). The vulnerability arises from a symlink attack on the rlmadmin.help file, allowing local users to read arbitrary files. The documented impact is local access with partial conf...