CVE-2013-6692

Cisco IOS XE 3.8S.2 and earlier does not properly use a DHCP pool during assignment of an IP address, which allows remote authenticated users to cause a denial of service device reload via an AAA packet that triggers an address requirement, aka Bug ID CSCuh04949...

CVE-2013-6693

The CVE describes a DoS in Cisco IOS MLDP on Cisco 7600 Series (older than 15.3(3)S) where configuring many VRFs and initiating many multicast flows can cause chunk corruption, triggering a device reload. The root cause is MLDP processing under heavy VRF multicast load. Exploitation requires the ...

CVE-2013-6692

CVE-2013-6692 affects Cisco IOS XE (3.8S(.2) and earlier). The issue lies in DHCP pool handling during IP address assignment for AAA clients, causing a denial of service that can reboot the device when processing an AAA packet that triggers an address requirement. An authenticated remote attacker...

CVE-2013-6689

Cisco Unified Communications Manager Unified CM 9.11 and earlier allows local users to bypass file permissions, and read, modify, or create arbitrary files, via an "overload" of the command-line utility, aka Bug ID CSCui58229...

CVE-2013-5556

The license-installation module on the Cisco Nexus 1000V switch 4.21SV15.2b and earlier for VMware vSphere, Cisco Nexus 1000V switch 5.21SM15.1 for Microsoft Hyper-V, and Cisco Virtual Security Gateway 4.21VSG11 for Nexus 1000V switches allows local users to gain privileges and execute arbitrary...

Authentication flaw

The web interface in Cisco Server Provisioner 6.4.0 Patch 5-1301292331 and earlier does not require authentication for unspecified pages, which allows remote attackers to obtain sensitive information via a direct request, aka Bug ID CSCug65664...

Directory traversal

Directory traversal vulnerability in the license-upload interface in the Enterprise License Manager ELM component in Cisco Unified Communications Manager 9.11 and earlier allows remote authenticated users to create arbitrary files via a crafted path, aka Bug ID CSCui58222...

Information disclosure

The "Files Available for Download" implementation in the Cisco Intelligent Automation for Cloud component in Cisco Services Portal 9.41 allows remote authenticated users to read arbitrary files via a crafted request, aka Bug ID CSCug65687...

CVE-2013-6689

Cisco Unified Communications Manager (9.1(1) and earlier) is affected by CVE-2013-6689 where an authenticated, local attacker can bypass file permissions and read/modify/write arbitrary files by overloading a command-line utility (CSCui58229). The issue stems from insufficient input validation in...

CVE-2013-6688

Cisco’s advisory CVE-2013-6688 fixes a directory traversal vulnerability in the Enterprise License Manager (ELM) license-upload interface of Cisco Unified Communications Manager 9.1(1) and earlier. The issue arises from insufficient input validation, allowing an authenticated, remote attacker to ...

CVE-2013-5556

The license-installation module on the Cisco Nexus 1000V switch 4.21SV15.2b and earlier for VMware vSphere, Cisco Nexus 1000V switch 5.21SM15.1 for Microsoft Hyper-V, and Cisco Virtual Security Gateway 4.21VSG11 for Nexus 1000V switches allows local users to gain privileges and execute arbitrary...

CVE-2013-6688

Directory traversal vulnerability in the license-upload interface in the Enterprise License Manager ELM component in Cisco Unified Communications Manager 9.11 and earlier allows remote authenticated users to create arbitrary files via a crafted path, aka Bug ID CSCui58222...

CVE-2013-6685

The firmware on Cisco Unified IP phones 8961, 9951, and 9971 uses weak permissions for memory block devices, which allows local users to gain privileges by mounting a device with a setuid file in its filesystem, aka Bug ID CSCui04382...

Design/Logic Flaw

Cisco IOS 12.424MDB9 and earlier on Content Services Gateway CSG devices does not properly implement the "parse error drop" feature, which allows remote attackers to bypass intended access restrictions via a crafted series of packets, aka Bug ID CSCug90143...

Design/Logic Flaw

The IPv6 implementation in Cisco NX-OS does not properly handle neighbor-table adjacencies, which allows remote attackers to cause a denial of service NS processing outage via a series of malformed packets, aka Bug ID CSCtd15904...

CVE-2013-6684

Cisco WLC CVE-2013-6684 affects the web framework in Cisco Wireless LAN Controllers. The vulnerability stems from improper validation of configuration parameters, enabling remote authenticated users to cause a denial of service via a crafted HTTP request (Bug CSCuh81011). Public exploit code is n...

CVE-2013-6685

The CVE-2013-6685 issue affects Cisco Unified IP Phone models 8961, 9951, and 9971. Root cause: weak permissions on memory block devices, enabling a local attacker to gain privileges by mounting a device that contains a setuid file in its filesystem. Impact: local privilege elevation on affected ...

CVE-2013-6682

The vulnerability CVE-2013-6682 affects Cisco ASA devices with the phone-proxy feature (ASA Software 9.0.3.6 and earlier). The root cause is improper validation of X.509 certificates in the phone-proxy, enabling an unauthenticated, remote attacker to temporarily insert an invalid entry in the pho...

CVE-2013-6685

The firmware on Cisco Unified IP phones 8961, 9951, and 9971 uses weak permissions for memory block devices, which allows local users to gain privileges by mounting a device with a setuid file in its filesystem, aka Bug ID CSCui04382...

CVE-2013-5552

Cisco IOS 12.424MDB9 and earlier on Content Services Gateway CSG devices does not properly implement the "parse error drop" feature, which allows remote attackers to bypass intended access restrictions via a crafted series of packets, aka Bug ID CSCug90143...