CVE-2013-5522

Cisco IOS on Catalyst 3750X switches has default Service Module credentials, which makes it easier for local users to gain privileges via a Service Module login, aka Bug ID CSCue92286...

Design/Logic Flaw

Cisco IOS on Catalyst 3750X switches has default Service Module credentials, which makes it easier for local users to gain privileges via a Service Module login, aka Bug ID CSCue92286...

CVE-2013-5522

Cisco Catalyst 3750-X Series Switches are affected by CVE-2013-5522 due to default credentials in the Cisco Service Module, enabling authenticated local privilege escalation to root on the module. The issue stems from default Service Module credentials. Cisco released a security advisory and soft...

CVE-2013-5522

Cisco IOS on Catalyst 3750X switches has default Service Module credentials, which makes it easier for local users to gain privileges via a Service Module login, aka Bug ID CSCue92286...

Cisco Catalyst 6500 and Cisco 7600 Series Devices Accessible via Loopback Address (cisco-sr-20070926-lb)

The remote Cisco Catalyst 6500 and Cisco 7600 series device is affected by an issue that could allow remote attackers to send packets to an interface for which network exposure was unintended. It should be noted that while the vendor describes a possible workaround, this plugin does not test for...

Multiple Vulnerabilities in Cisco Firewall Services Module Software (cisco-sa-20130410-fwsm)

The remote Cisco Firewall Services Module FWSM for Cisco Catalyst 6500 Series Switches and Cisco 7600 Series Routers may be affected by the following vulnerabilities : - A flaw in the FWSM software could allow remote attackers to cause a denial of service DoS condition via a crafted IKEv1 message...

Cisco Application Control Engine (ACE) Version

Cisco Application Control Engine ACE software is installed on the remote Cisco IOS or ACE device. It is a load-balancing and application-delivery solution for Cisco Catalyst 6500 Series switches and Cisco 7600 Series routers, and it is also available as an appliance. TRUSTED...

Multiple Vulnerabilities in Cisco Intrusion Prevention System Software (cisco-sa-20130717-ips)

According to its self-reported version, the version of the Cisco Intrusion Prevention System Software running on the remote host has the following vulnerabilities : - The IP stack in Cisco IPS Software could allow remote attackers to cause a denial of service DoS condition via malformed IPv4...

CVE-2013-3411

The IDSM-2 drivers in Cisco Intrusion Prevention System IPS Software on Cisco Catalyst 6500 devices with an IDSM-2 module allow remote attackers to cause a denial of service device hang via malformed IPv4 TCP packets, aka Bug ID CSCuh27460...

Code injection

The IDSM-2 drivers in Cisco Intrusion Prevention System IPS Software on Cisco Catalyst 6500 devices with an IDSM-2 module allow remote attackers to cause a denial of service device hang via malformed IPv4 TCP packets, aka Bug ID CSCuh27460...

CVE-2013-3411

The IDSM-2 drivers in Cisco Intrusion Prevention System IPS Software on Cisco Catalyst 6500 devices with an IDSM-2 module allow remote attackers to cause a denial of service device hang via malformed IPv4 TCP packets, aka Bug ID CSCuh27460...

CVE-2013-3411

Cisco IPS Software (Catalyst 6500 with IDSM-2 module) is affected by CVE-2013-3411: IDSM-2 Malformed TCP Packets Denial of Service vulnerability (Bug CSCuh27460). Exploitation can cause a DoS or device hang by sending malformed IPv4 TCP packets to the IDSM-2 module; root cause is malformed TCP pa...

Cisco Catalyst 4500E Series Switch with Cisco Catalyst Supervisor Engine 7L-E Denial of Service Vulnerability (cisco-sa-20120926-ecc)

The Catalyst 4500E series switch with Supervisor Engine 7L-E contains a denial of service DoS vulnerability when processing specially crafted packets that can cause a reload of the device. Cisco has released free software updates that address this vulnerability. Workarounds that mitigate this...

CVE-2013-1146

The Smart Install client functionality in Cisco IOS 12.2 and 15.0 through 15.3 on Catalyst switches allows remote attackers to cause a denial of service device reload via crafted image list parameters in Smart Install packets, aka Bug ID CSCub55790...

CVE-2013-1146

The CVE-2013-1146 entry relates to Cisco IOS Smart Install: the Smart Install client feature on Catalyst switches running IOS 12.2 and 15.0–15.3 is vulnerable to remote DoS via crafted image list parameters in Smart Install packets, causing a device reload. Root cause is a vulnerability in the Sm...

CVE-2013-1100

The HTTP server in Cisco IOS on Catalyst switches does not properly handle TCP socket events, which allows remote attackers to cause a denial of service device crash via crafted packets on TCP port 1 80 or 2 443, aka Bug ID CSCuc53853...

Code injection

The HTTP server in Cisco IOS on Catalyst switches does not properly handle TCP socket events, which allows remote attackers to cause a denial of service device crash via crafted packets on TCP port 1 80 or 2 443, aka Bug ID CSCuc53853...

CVE-2013-1100

The HTTP server in Cisco IOS on Catalyst switches does not properly handle TCP socket events, which allows remote attackers to cause a denial of service device crash via crafted packets on TCP port 1 80 or 2 443, aka Bug ID CSCuc53853...

CVE-2013-1100

The CVE-2013-1100 entry concerns Cisco IOS running on Catalyst switches. The HTTP server component fails to properly handle TCP socket events, enabling a remote attacker to trigger a denial-of-service (device crash) by sending crafted packets to TCP ports 80 or 443 (Bug ID CSCuc53853). Multiple c...

SA-CONTRIB-2013-014 - Drush Debian Packaging - Information Disclosure - Unsupported

This package is a tool to build debian packages from a Drupal instance. The module doesn't sufficiently protect database credentials. This vulnerability is mitigated by the fact that an attacker must have shell access to the server. CVE identifiers issued CVE-2013-0260 Versions affected All...