CVE-2007-1257

The Network Analysis Module NAM in Cisco Catalyst Series 6000, 6500, and 7600 allows remote attackers to execute arbitrary commands via certain SNMP packets that are spoofed from the NAM's own IP address...

Cisco Catalyst MPLS报文处理拒绝服务漏洞

Cisco Catalyst是一系列由Cisco公司发表和维护的商业级别交换机。 运行某些Cisco IOS版本的Cisco Catalyst系列交换机受多协议标签交换（MPLS）报文攻击的影响。如果以混杂模式运行的话（监控引擎上的CatOS软件和MSFC上的IOS软件），或运行Cisco IOS软件模块化的话，则发送特制的MPLS报文就可以导致设备重载。仅可从本地网段发送MPLS报文，这限制了漏洞利用的范围。 Cisco Catalyst 6500 Cisco Catalyst 6000 Cisco 7600...

Cisco Catalyst Systems with a NAM may allow system access via spoofing the SNMP communication

Overview A vulnerabilty in Cisco Catalyst Systems that have a Network Analysis Module NAM installed may allow a remote, unauthenticated attacker to gain complete control of this device. Description Cisco Catalyst 6000, 6500, and Cisco 7600 series switches may utilize Cisco's NAM to monitor and...

Cisco多个产品网络分析模块SNMP通讯欺骗漏洞

Cisco Catalyst是一系列由Cisco公司发表和维护的商业级别交换机。 Catalyst 6000、6500系列和Cisco 7600系列中部署了网络分析模块（NAM），使用远程监控（RMON）、RMON2和其他MIB监控和分析网络通讯。NAM使用简单网络管理协议（SNMP）与Catalyst系统进行通讯，攻击者可以通过欺骗Catalyst系统与NAM之间的SNMP通讯获得对Catalyst系统的完全控制。 Cisco Catalyst 6500 Cisco Catalyst 6000 Cisco 7600...

Cisco Multiple Products Network Analysis Module (NAM) SNMP Spoofing Remote Code Execution

The remote host is a CISCO Catalyst or Cisco 7600 router that contains a version of IOS or CatOS that is affected by an SNMP communication spoofing vulnerability. An attacker may exploit this flaw to gain complete control of the remote device. C Tenable Network Security, Inc. include"compat.inc";...

Cisco Catalyst Hybrid Mode Malformed MPLS Packet Remote DoS (CSCsd37415, CSCef90002)

The remote host is a CISCO Catalyst 6500 switch containing a version of IOS that is affected by a denial of service vulnerability when processing malformed MPLS packets. An attacker may exploit this flaw to crash the remote device. C Tenable Network Security, Inc. include"compat.inc"; ifdescripti...

Cisco Catalyst 6000, 6500 Series and Cisco 7600 Series NAM (Network Analysis Module) Vulnerability

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

Cisco Security Advisory: Cisco Catalyst 6000, 6500 Series and Cisco 7600 Series NAM (Network Analysis Module) Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco Catalyst 6000, 6500 Series and Cisco 7600 Series NAM Network Analysis Module Vulnerability Advisory ID: cisco-sa-20070228-nam Revision 1.0 For Public Release 2007 February 28 -...

Cisco Security Advisory: Cisco Catalyst 6000, 6500 and Cisco 7600 Series MPLS Packet Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco Catalyst 6000, 6500 and Cisco 7600 Series MPLS Packet Vulnerability Advisory ID: cisco-sa-20070228-mpls Revision 1.0 For Public Release 2007 February 28 -...

Cisco Catalyst 6000, 6500 and Cisco 7600 Series MPLS Packet Vulnerability

Cisco Catalyst 6500 series systems that are running certain versions of Cisco Internetwork Operating System IOS are vulnerable to an attack from a Multi Protocol Label Switching MPLS packet. Only the systems that are running in Hybrid Mode Catalyst OS CatOS software on the Supervisor Engine and I...

CVE-2005-4826

CVE-2005-4826 concerns Cisco IOS 12.1(22)EA3 on Catalyst 2950T where the VLAN Trunking Protocol (VTP) can be abused by a crafted Subset-Advert packet to cause a device reboot (DoS). Related entries (CVE-2006-4774/75/76) describe VTP-related crashes and near-arbitrary-code risk via VTP summary adv...

Cisco Catalyst switches VTP DoS

Switch crashes on malformed VTP VLAN Trunking Protocol Subset-Advert message...

S21sec-034-en: Cisco VTP DoS vulnerability

ID: S21SEC-034-en Title: Cisco VTP Denial Of Service Date: 26/01/2007 Status: Vendor contacted, bug fixed Severity: Medium - DoS - remote from the local subnet Scope: Cisco Catalyst Switch denial of service Platforms: IOS Author: Alfredo Andres Omella, David Barroso Berrueta Location:...

Firewalls for local network

Firewalls for local network Sergey V. Gordeychik, [email protected] Installation of a firewall is the basic requirement for building a secured network. Years of their existence made firewalls more functional and more secured and developed them from simple packet filters into devices with...

Re: Cisco IOS VTP issues

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello, This is a Cisco response to an advisory published by FX of Phenoelit posted as of September 13, 2006 at: http://www.securityfocus.com/archive/1/445896/30/0/threaded and entitled "Cisco Systems IOS VTP multiple vulnerabilities". An official...

[Full-disclosure] Cisco Security Advisory: Unintentional Password Modification in Cisco Firewall Products

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Unintentional Password Modification in Cisco Firewall Products Document ID: 70811 Advisory ID: cisco-sa-20060823-firewall http://www.cisco.com/warp/public/707/cisco-sa-20060823-firewall.shtml Revision 1.0 For Public Release 20...

CVE-2005-4826

Unspecified vulnerability in the VLAN Trunking Protocol VTP feature in Cisco IOS 12.122EA3 on Catalyst 2950T switches allows remote attackers to cause a denial of service device reboot via a crafted Subset-Advert message packet, a different issue than CVE-2006-4774, CVE-2006-4775, and CVE-2006-47...

CVE-2005-4258

Unspecified Cisco Catalyst Switches allow remote attackers to cause a denial of service device crash via an IP packet with the same source and destination IPs and ports, and with the SYN flag set aka LanD. NOTE: the provenance of this issue is unknown; the details are obtained solely from the BID...

CVE-2005-4258

Unspecified Cisco Catalyst Switches allow remote attackers to cause a denial of service device crash via an IP packet with the same source and destination IPs and ports, and with the SYN flag set aka LanD. NOTE: the provenance of this issue is unknown; the details are obtained solely from the BID...

CVE-2005-4258

CVE-2005-4258 affects Cisco Catalyst Switches. A remote attacker can cause a device crash (DoS) by sending an IP packet where source and destination IPs/ports are identical and the SYN bit is set (LanD). The issue’s provenance is unknown and details originate from BIN/NVD entries. The NVD metrics...