CVE-2009-1164

CVE-2009-1164 affects Cisco Wireless LAN Controllers (WLC) across multiple lines of hardware (e.g., 1500/2000/2100/4100/4200/4400, WiSM, ISR module WLCs, Catalyst 3750G). The vulnerability is a Denial of Service caused by a malformed HTTP/HTTPS authentication response in the administrative web in...

CVE-2009-0625

Unspecified vulnerability in Cisco ACE Application Control Engine Module for Catalyst 6500 Switches and 7600 Routers before A21.2 and Cisco ACE 4710 Application Control Engine Appliance before A18.0 allows remote attackers to cause a denial of service device reload via a crafted SNMPv3 packet...

CVE-2009-0623

Unspecified vulnerability in Cisco ACE Application Control Engine Module for Catalyst 6500 Switches and 7600 Routers before A21.3 and Cisco ACE 4710 Application Control Engine Appliance before A32.1 allows remote attackers to cause a denial of service device reload via a crafted SSH packet...

Design/Logic Flaw

Cisco ACE Application Control Engine Module for Catalyst 6500 Switches and 7600 Routers before A21.1 uses default 1 usernames and 2 passwords for a the administrator and b web management, which makes it easier for remote attackers to perform configuration changes or obtain operating-system access...

Default credentials

The username command in Cisco ACE Application Control Engine Module for Catalyst 6500 Switches and 7600 Routers and Cisco ACE 4710 Application Control Engine Appliance stores a cleartext password by default, which allows context-dependent attackers to obtain sensitive information...

CVE-2009-0625

CVE-2009-0625 affects Cisco ACE 4710 Appliance and Cisco ACE Module for Catalyst 6500/7600. The Cisco advisory details multiple separate vulnerabilities: Default usernames and passwords (affecting ACE 4710 before A1(8a) and ACE Module before A2(1.2/1.1)); Privilege Escalation (ACE 4710 before A1(...

CVE-2009-0622

Unspecified vulnerability in Cisco ACE Application Control Engine Module for Catalyst 6500 Switches and 7600 Routers before A21.2 and Cisco ACE 4710 Application Control Engine Appliance before A18a allows remote authenticated users to execute arbitrary operating-system commands through a command...

CVE-2009-0620

Cisco ACE vulnerabilities (CVE-2009-0620, and related CVEs in the same advisory) affect the Cisco ACE Application Control Engine Module for Catalyst 6500/7600 and the Cisco ACE 4710 Appliance. The core issue is default credentials: default administrator and web-management accounts are used, enabl...

CVE-2009-0622

CVE-2009-0622 affects Cisco ACE Application Control Engine Module for Catalyst 6500/7600 and Cisco ACE 4710 Appliance. Multiple vulnerabilities exist, including default credentials (leading to credential compromise and potential OS access via the device CLI), privilege escalation for authenticate...

CVE-2009-0623

The CVE-2009-0623 entry applies to Cisco ACE Application Control Engine Module for Catalyst 6500/7600 and Cisco ACE 4710 Appliance. Affected vulnerabilities include Crafted SSH Packet which can cause the device to reload (DoS) when SSH access is configured. The Cisco advisory lists affected compo...

CVE-2009-0059

The Cisco Wireless LAN Controller WLC, Cisco Catalyst 6500 Wireless Services Module WiSM, and Cisco Catalyst 3750 Integrated Wireless LAN Controller with software 4.x before 4.2.176.0 and 5.2.x before 5.2.157.0 allow remote attackers to cause a denial of service device reload via a web...

Code injection

Unspecified vulnerability in the Wireless LAN Controller WLC TSEC driver in the Cisco 4400 WLC, Cisco Catalyst 6500 and 7600 Wireless Services Module WiSM, and Cisco Catalyst 3750 Integrated Wireless LAN Controller with software 4.x before 4.2.176.0 and 5.x before 5.1 allows remote attackers to...

Design/Logic Flaw

Unspecified vulnerability in the Cisco Wireless LAN Controller WLC, Cisco Catalyst 6500 Wireless Services Module WiSM, and Cisco Catalyst 3750 Integrated Wireless LAN Controller with software 4.2.173.0 allows remote authenticated users to gain privileges via unknown vectors, as demonstrated by...

Design/Logic Flaw

The Cisco Wireless LAN Controller WLC, Cisco Catalyst 6500 Wireless Services Module WiSM, and Cisco Catalyst 3750 Integrated Wireless LAN Controller with software 4.x before 4.2.176.0 and 5.x before 5.2 allow remote attackers to cause a denial of service web authentication outage or device reload...

CVE-2009-0061

Unspecified vulnerability in the Wireless LAN Controller WLC TSEC driver in the Cisco 4400 WLC, Cisco Catalyst 6500 and 7600 Wireless Services Module WiSM, and Cisco Catalyst 3750 Integrated Wireless LAN Controller with software 4.x before 4.2.176.0 and 5.x before 5.1 allows remote attackers to...

CVE-2009-0062

CVE-2009-0062 concerns a privilege-escalation vulnerability in Cisco Wireless LAN Controllers (WLCs), Cisco Catalyst 6500 WiSM modules, and Cisco Catalyst 3750 Integrated WLCs running software 4.2.173.0. The issue allows a remote authenticated user at the Lobby Admin or Local Management User leve...

CVE-2009-0059

Cisco CVE-2009-0059 affects Cisco Wireless LAN Controllers (WLCs), Cisco Catalyst 6500 Wireless Services Module (WiSM), and Cisco Catalyst 3750 Integrated WLCs. Vulnerable software versions are 4.x before 4.2.176.0 and 5.2.x before 5.2.157.0. The issue allows remote attackers to cause a denial of...

CVE-2009-0058

The CVE-2009-0058 issue affects Cisco Wireless LAN Controllers (WLCs), Cisco Catalyst 6500 WiSM modules, and Catalyst 3750 Integrated WLCs. The vulnerability exists in software versions 4.x prior to 4.2.176.0 and 5.x prior to 5.2, allowing remote attackers to cause a denial of service (web authen...

Multiple Cisco Products Vulnerabilities Exploit (Cisco Global Exploiter)

No description provided by source. !/usr/bin/perl Cisco Global Exploiter Legal notes : The BlackAngels staff refuse all responsabilities for an incorrect or illegal use of this software or for eventual damages to others systems. www blackangels it Modules use Socket; use IO::Socket; Main ...

Cisco内容交换模块7层负载均衡拒绝服务漏洞

BUGTRAQ ID: 29216 CVECAN ID: CVE-2008-1749 Catalyst内容交换模块（CSM）是Catalyst 6500和7600系列的集成服务器负载均衡线卡，用于改善客户端通讯对端点的响应时间。 如果对CSM或CSM-S配置了7层负载均衡的话，Cisco CSM和Cisco CSM-S的某些软件版本中就会存在内存泄露漏洞。当CSM或CSM-S处理带有特制TCP标记组合的TCP段且无法确认负载均衡时，由于CSM/CSM-S后的服务器过载和/或无法接受TCP连接，可能触发内存泄露。...