Cisco Catalyst 4000 4.x/5.x / Catalyst 5000 4.5/5.x / Catalyst 6000 5.x - Memory Leak Denial of Service

source: https://www.securityfocus.com/bid/2072/info Cisco Catalyst is a high speed switch implemented in local area networks. The telnet server that is built into the Catalyst firmware for remote administration contains a memory leak vulnerability that can result in a denial of service. Each time...

Cisco Catalyst Web Interface Remote Command Execution

The remote device appears to be a Cisco Catalyst. It is possible to execute arbitrary commands on the router by requesting them via HTTP, as in : /exec/show/config/cr This command shows the configuration file, which contains passwords. A remote attacker could use this flaw to take control of the...

Advisory def-2000-02: Cisco Catalyst remote command execution

====================================================================== Defcom Labs Advisory def-2000-02 Cisco Catalyst remote command execution Author: Olle Segerdahl [email protected] Release Date: 2000-10-26 ======================================================================...

Большая дырка в Web-интерфейсе Cisco Catalist (Web exec)

Анонимный пользователь может выполнить любые команды, например http://catalyst/exec/show/config/cr...

Cisco Catalyst 3500 XL - Arbitrary Command Execution

Cisco Catalyst 3500 XL - Arbitrary Command Execution source: https://www.securityfocus.com/bid/1846/info A vulnerability exists in the webserver configuration interface which will allow an anonymous user to execute commands. A http request which includes /exec and a known filename will reveal the...

Cisco Catalyst 3500 XL - Arbitrary Command Execution

source: https://www.securityfocus.com/bid/1846/info A vulnerability exists in the webserver configuration interface which will allow an anonymous user to execute commands. A http request which includes /exec and a known filename will reveal the contents of the particular file. In addition to...

CVE-2000-0267

Cisco Catalyst 5.4.x allows a user to gain access to the "enable" mode without a password...

CVE-2000-0267

Cisco Catalyst 5.4.x is affected by CVE-2000-0267, where a user can gain access to the privileged enable mode without a password. The issue is a local bypass of authentication to the enable shell, enabling partial to full privilege exposure as described (no explicit exploitation details in the do...

CVE-2000-0267

Cisco Catalyst 5.4.x allows a user to gain access to the "enable" mode without a password...

Cisco Catalist позволяет любому пользователю получить администраторские привелегии.

В версии П/О 5.41 можно обойти проверку enable-пароля. Исправлено в 5.42...

Security Advisory: Cisco Catalyst Enable Password Bypass Vulnerability

Cisco Catalyst Enable Password Bypass Vulnerability Revision 1.1 Tentatively for release 2000 April 19 08:00 AM US/Pacific UTC+0700 --------------------------------------------------------------------------- Summary ======= Cisco Catalyst software permits unauthorized access to the enable mode in...

Cisco Catalyst Enable Password Bypass Vulnerability

...

CVE-1999-0430

CVE-1999-0430 affects Cisco Catalyst LAN switches with Catalyst 5000 supervisor software. A remote attacker can cause a denial of service by forcing the supervisor module to reload via a remote TCP interaction. Impacts are described as availability disruption (partial). The issue is documented ac...

CVE-1999-0430

Cisco Catalyst LAN switches running Catalyst 5000 supervisor software allows remote attackers to perform a denial of service by forcing the supervisor module to reload...

CVE-1999-1129

Cisco Catalyst 2900 Virtual LAN VLAN switches allow remote attackers to inject 802.1q frames into another VLAN by forging the VLAN identifier in the trunking tag...

cisco.catalyst.switches.txt

Date: Wed, 24 Mar 1999 19:39:53 -0000 From: [email protected] To: [email protected] Subject: Cisco security notice: Cisco Catalyst Supervisor Remote Reload -----BEGIN PGP SIGNED MESSAGE----- Cisco Catalyst Supervisor Remote Reload Revision 1.2 For release Wednesday, March 24, 1999, 12:00 PM...

Cisco Catalyst Supervisor Remote Reload DoS

The remote host appears to be a Cisco Catalyst switch. This device runs an undocumented TCP service. Sending a carriage return to this port causes the switch to immediately reset. A remote attacker could repeatedly exploit this to disable the switch. C Tenable Network Security, Inc...

Cisco Catalyst Supervisor Remote Reload

...

CVE-1999-0430

Cisco Catalyst LAN switches running Catalyst 5000 supervisor software allows remote attackers to perform a denial of service by forcing the supervisor module to reload...