EUVD-2014-2181

Malware in sbrugna...

Session fixation

The session-termination functionality on Cisco ONS 15454 controller cards with software 9.6 and earlier does not initialize an unspecified pointer, which allows remote authenticated users to cause a denial of service card reset via crafted session-close actions, aka Bug ID CSCug97416...

CVE-2014-2141

CVE-2014-2141 affects Cisco ONS 15454 Controller Cards (software 9.6 and earlier). The root cause is an uninitialized pointer in the session-termination function, which allows an authenticated, remote attacker to cause a denial of service (card reset) via crafted session-close actions. Cisco’s ad...