2008 matches found
CVE-2007-4012
CVE-2007-4012 affects Cisco 4100/4400, Airespace 4000, and Catalyst 6500/3750 WLC software. Versions before 4.1.180.0 are vulnerable to a remote DoS caused by a broadcast ARP packet targeting the IP of a known client context (CSCsj50374). Impact: ARP storm; CVSS v2 base score 7.1 ( HIGH ). Remedi...
CVE-2007-1257
The Network Analysis Module NAM in Cisco Catalyst Series 6000, 6500, and 7600 allows remote attackers to execute arbitrary commands via certain SNMP packets that are spoofed from the NAM's own IP address...
Design/Logic Flaw
The Network Analysis Module NAM in Cisco Catalyst Series 6000, 6500, and 7600 allows remote attackers to execute arbitrary commands via certain SNMP packets that are spoofed from the NAM's own IP address...
Code injection
Unspecified vulnerability in Cisco IOS 12.2SXA, SXB, SXD, and SXF; and the MSFC2, MSFC2a and MSFC3 running in Hybrid Mode on Cisco Catalyst 6000, 6500 and Cisco 7600 series systems; allows remote attackers on a local network segment to cause a denial of service software reload via a certain MPLS...
CVE-2007-1257
The CVE-2007-1257 issue affects Cisco Catalyst 6000/6500/7600 Series with the Network Analysis Module (NAM). The NAM is vulnerable to remote code execution through SNMP packets spoofed from the NAM’s own IP address, enabling an attacker to gain complete control of affected devices. Multiple conne...
CVE-2007-1257
The Network Analysis Module NAM in Cisco Catalyst Series 6000, 6500, and 7600 allows remote attackers to execute arbitrary commands via certain SNMP packets that are spoofed from the NAM's own IP address...
CVE-2007-1258: Undefined Security Weakness
Unspecified vulnerability in Cisco IOS 12.2SXA, SXB, SXD, and SXF; and the MSFC2, MSFC2a and MSFC3 running in Hybrid Mode on Cisco Catalyst 6000, 6500 and Cisco 7600 series systems; allows remote attackers on a local network segment to cause a denial of service software reload via a certain MPLS...
CVE-2007-1257: Improper Input Validation
The Network Analysis Module NAM in Cisco Catalyst Series 6000, 6500, and 7600 allows remote attackers to execute arbitrary commands via certain SNMP packets that are spoofed from the NAM's own IP address...
Cisco Catalyst Systems with a NAM may allow system access via spoofing the SNMP communication
Overview A vulnerabilty in Cisco Catalyst Systems that have a Network Analysis Module NAM installed may allow a remote, unauthenticated attacker to gain complete control of this device. Description Cisco Catalyst 6000, 6500, and Cisco 7600 series switches may utilize Cisco's NAM to monitor and...
Cisco Catalyst MPLS报文处理拒绝服务漏洞
Cisco Catalyst是一系列由Cisco公司发表和维护的商业级别交换机。 运行某些Cisco IOS版本的Cisco Catalyst系列交换机受多协议标签交换（MPLS）报文攻击的影响。如果以混杂模式运行的话（监控引擎上的CatOS软件和MSFC上的IOS软件），或运行Cisco IOS软件模块化的话，则发送特制的MPLS报文就可以导致设备重载。仅可从本地网段发送MPLS报文，这限制了漏洞利用的范围。 Cisco Catalyst 6500 Cisco Catalyst 6000 Cisco 7600...
Cisco多个产品网络分析模块SNMP通讯欺骗漏洞
Cisco Catalyst是一系列由Cisco公司发表和维护的商业级别交换机。 Catalyst 6000、6500系列和Cisco 7600系列中部署了网络分析模块（NAM），使用远程监控（RMON）、RMON2和其他MIB监控和分析网络通讯。NAM使用简单网络管理协议（SNMP）与Catalyst系统进行通讯，攻击者可以通过欺骗Catalyst系统与NAM之间的SNMP通讯获得对Catalyst系统的完全控制。 Cisco Catalyst 6500 Cisco Catalyst 6000 Cisco 7600...
Cisco Multiple Products Network Analysis Module (NAM) SNMP Spoofing Remote Code Execution
The remote host is a CISCO Catalyst or Cisco 7600 router that contains a version of IOS or CatOS that is affected by an SNMP communication spoofing vulnerability. An attacker may exploit this flaw to gain complete control of the remote device. C Tenable Network Security, Inc. include"compat.inc";...
Cisco Catalyst Hybrid Mode Malformed MPLS Packet Remote DoS (CSCsd37415, CSCef90002)
The remote host is a CISCO Catalyst 6500 switch containing a version of IOS that is affected by a denial of service vulnerability when processing malformed MPLS packets. An attacker may exploit this flaw to crash the remote device. C Tenable Network Security, Inc. include"compat.inc"; ifdescripti...
Cisco Catalyst 6000, 6500 Series and Cisco 7600 Series NAM (Network Analysis Module) Vulnerability
THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...
Cisco Security Advisory: Cisco Catalyst 6000, 6500 Series and Cisco 7600 Series NAM (Network Analysis Module) Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco Catalyst 6000, 6500 Series and Cisco 7600 Series NAM Network Analysis Module Vulnerability Advisory ID: cisco-sa-20070228-nam Revision 1.0 For Public Release 2007 February 28 -...
Cisco Security Advisory: Cisco Catalyst 6000, 6500 and Cisco 7600 Series MPLS Packet Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco Catalyst 6000, 6500 and Cisco 7600 Series MPLS Packet Vulnerability Advisory ID: cisco-sa-20070228-mpls Revision 1.0 For Public Release 2007 February 28 -...
Cisco Catalyst 6000, 6500 and Cisco 7600 Series MPLS Packet Vulnerability
Cisco Catalyst 6500 series systems that are running certain versions of Cisco Internetwork Operating System IOS are vulnerable to an attack from a Multi Protocol Label Switching MPLS packet. Only the systems that are running in Hybrid Mode Catalyst OS CatOS software on the Supervisor Engine and I...
CVE-2005-4826
CVE-2005-4826 concerns Cisco IOS 12.1(22)EA3 on Catalyst 2950T where the VLAN Trunking Protocol (VTP) can be abused by a crafted Subset-Advert packet to cause a device reboot (DoS). Related entries (CVE-2006-4774/75/76) describe VTP-related crashes and near-arbitrary-code risk via VTP summary adv...
CVE-2005-4826: Undefined Security Weakness
Unspecified vulnerability in the VLAN Trunking Protocol VTP feature in Cisco IOS 12.122EA3 on Catalyst 2950T switches allows remote attackers to cause a denial of service device reboot via a crafted Subset-Advert message packet, a different issue than CVE-2006-4774, CVE-2006-4775, and CVE-2006-47...