CVE-2019-1588

A vulnerability in the Cisco Nexus 9000 Series Fabric Switches running in Application-Centric Infrastructure ACI mode could allow an authenticated, local attacker to read arbitrary files on an affected device. The vulnerability is due to a lack of proper input and validation checking mechanisms o...

CVE-2019-1585 Cisco Nexus 9000 Series Fabric Switches Application-Centric Infrastructure Mode Privilege Escalation Vulnerability

A vulnerability in the controller authorization functionality of Cisco Nexus 9000 Series ACI Mode Switch Software could allow an authenticated, local attacker to escalate standard users with root privilege on an affected device. The vulnerability is due to a misconfiguration of certain sudoers...

CVE-2019-1585

Cisco Nexus 9000 Series ACI Mode Switch Software contains a privilege-escalation vulnerability (CVE-2019-1585) due to misconfigured sudoers for the bashroot component. An authenticated, local attacker could log in with a crafted user ID and temporarily gain root privileges, escalating Standard us...

CVE-2019-1585 Cisco Nexus 9000 Series Fabric Switches Application-Centric Infrastructure Mode Privilege Escalation Vulnerability

A vulnerability in the controller authorization functionality of Cisco Nexus 9000 Series ACI Mode Switch Software could allow an authenticated, local attacker to escalate standard users with root privilege on an affected device. The vulnerability is due to a misconfiguration of certain sudoers...

Cisco Nexus 9000 Series Fabric Switches Application-Centric Infrastructure Mode Privilege Escalation Vulnerability

A vulnerability in the controller authorization functionality of Cisco Nexus 9000 Series ACI Mode Switch Software could allow an authenticated, local attacker to escalate standard users with root privilege on an affected device. The vulnerability is due to a misconfiguration of certain sudoers...

CVE-2018-0372

A vulnerability in the DHCPv6 feature of the Cisco Nexus 9000 Series Fabric Switches in Application-Centric Infrastructure ACI Mode could allow an unauthenticated, remote attacker to cause the device to run low on system memory, which could result in a Denial of Service DoS condition on an affect...

CVE-2018-0372

The CVE-2018-0372 issue affects Cisco Nexus 9000 Series Fabric Switches in ACI Mode (v13.0(1k)); DHCPv6 processing on interfaces can exhaust memory and cause DoS, exploitable by high-rate DHCPv6 packets when unicast routing on the Bridge Domain is enabled. Impact includes memory exhaustion and po...

Input validation

A vulnerability in the CLI of Cisco NX-OS System Software could allow an authenticated, local attacker to read the contents of arbitrary files. The vulnerability is due to insufficient input validation for a specific CLI command. An attacker could exploit this vulnerability by issuing a crafted...

CVE-2017-12338

A vulnerability in the CLI of Cisco NX-OS System Software could allow an authenticated, local attacker to read the contents of arbitrary files. The vulnerability is due to insufficient input validation for a specific CLI command. An attacker could exploit this vulnerability by issuing a crafted...

Update Rollup 9 for System Center 2012 R2 Virtual Machine Manager

Update Rollup 9 for System Center 2012 R2 Virtual Machine Manager Introduction This article describes the issues that are fixed in Update Rollup 9 for Microsoft System Center 2012 R2 Virtual Machine Manager. There are three updates available for System Center 2012 R2 Virtual Machine Manager: one...

Amazon Linux AMI : 389-ds-base (ALAS-2016-773)

CVE-2016-5405 389-ds-base: Password verification vulnerable to timing attack It was found that 389 Directory Server was vulnerable to a remote password disclosure via timing attack. A remote attacker could possibly use this flaw to retrieve directory server password after many tries. CVE-2016-541...

Medium: 389-ds-base

Issue Overview: CVE-2016-5405 389-ds-base: Password verification vulnerable to timing attack It was found that 389 Directory Server was vulnerable to a remote password disclosure via timing attack. A remote attacker could possibly use this flaw to retrieve directory server password after many...

Scientific Linux Security Update : 389-ds-base on SL6.x i386/x86_64 (20161115)

Security Fixes : - It was found that 389 Directory Server was vulnerable to a flaw in which the default ACI Access Control Instructions could be read by an anonymous user. This could lead to leakage of sensitive information. CVE-2016-5416 - An information disclosure flaw was found in 389 Director...

CVE-2016-6457

A vulnerability in the Cisco Nexus 9000 Series Platform Leaf Switches for Application Centric Infrastructure ACI could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on the affected device. This vulnerability affects Cisco Nexus 9000 Series Leaf Switches TO...

Design/Logic Flaw

A vulnerability in the Cisco Nexus 9000 Series Platform Leaf Switches for Application Centric Infrastructure ACI could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on the affected device. This vulnerability affects Cisco Nexus 9000 Series Leaf Switches TO...

CVE-2016-6457

A vulnerability in the Cisco Nexus 9000 Series Platform Leaf Switches for Application Centric Infrastructure ACI could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on the affected device. This vulnerability affects Cisco Nexus 9000 Series Leaf Switches TO...

CVE-2016-6457

CVE-2016-6457 affects Cisco Nexus 9000 Series Platform Leaf Switches (TOR) in ACI Mode and the Cisco APIC. The root cause is improper handling of a type of Layer 2 control plane traffic, allowing an unauthenticated, adjacent attacker to trigger a DoS on the affected device. Affected releases incl...

Oracle Linux 6 : 389-ds-base (ELSA-2016-2765)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-2765 advisory. - Resolves: 1358559 - CVE-2016-4992 389-ds-base: Information disclosure via repeated use of LDAP ADD operation - Resolves: 1361421 - CVE-2016-5416...

Cisco Application Policy Infrastructure Controller Denial of Service Vulnerability

A vulnerability in the Cisco Nexus 9000 Series Platform Leaf Switches for Application Centric Infrastructure ACI could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on the affected device. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions...

App Container docker2aci Wireless Loop Denial of Service Vulnerability

docker2aci is a set of tools for converting Docker a technology for cross-platform distribution of applications developed in the Go language images into ACIs format. A denial of service vulnerability exists in App Container docker2aci, which can be exploited by an attacker to cause the program to...