Cisco Security Advisory: Cisco IPSec VPN Services Module Malformed IKE Packet Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco IPSec VPN Services Module Malformed IKE Packet Vulnerability Revision 1.0 For Public Release 2004 April 8 at 1600 UTC GMT ---------------------------------------------------------------------- Contents Summary Affected...

Cisco Catalyst reboots in response to an SSH "protocol mismatch" error

Overview Multiple versions of Cisco Catalyst switches contain a denial-of-service vulnerability that allows unauthenticated remote users to restart an affected device. Description Cisco Catalyst switches in the 6000, 5000, and 4000 series contain a vulnerability in their SSH support component. Th...

CVE-2003-1002

Cisco Firewall Services Module FWSM in Cisco Catalyst 6500 and 7600 series devices allows remote attackers to cause a denial of service crash and reload via an SNMPv3 message when snmp-server is set...

CVE-2003-1002

CVE-2003-1002 affects Cisco Firewall Services Module (FWSM) in Cisco Catalyst 6500 and 7600 series devices. A remote attacker can trigger a denial of service by sending an SNMPv3 message when snmp-server is configured, causing a crash and reload. Exploitation details are not provided in the conne...

CVE-2003-1001: Undefined Security Weakness

Buffer overflow in the Cisco Firewall Services Module FWSM in Cisco Catalyst 6500 and 7600 series devices allows remote attackers to cause a denial of service crash and reload via HTTP auth requests for 1 TACACS+ or 2 RADIUS authentication...

CVE-2003-1002: Undefined Security Weakness

Cisco Firewall Services Module FWSM in Cisco Catalyst 6500 and 7600 series devices allows remote attackers to cause a denial of service crash and reload via an SNMPv3 message when snmp-server is set...

Cisco Catalist unauthorized access

telnet requiest with specific structure causes command execution without authentication...

Cisco Catalist DoS

After receiving few TCP packets with non-standard flags switch fails to establish new TCP connections...

Cisco Security Advisory: Denial-of-Service of TCP-based Services in CatOS

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Denial-of-Service of TCP-based Services in CatOS Revision 1.0 For Public Release 2003 July 09 at 16:00 UTC GMT - ------------------------------------------------------------------------- Summary ====== After receiving eight TC...

CVE-2003-0216

Unknown vulnerability in Cisco Catalyst 7.51 allows local users to bypass authentication and gain access to the enable mode without a password...

Cisco Catalyst switches allow access to "enable mode" without password

Overview Cisco Catalyst OS 7.51 contains a vulnerability that allows anyone who can obtain command line access to gain "enable" mode access without knowledge of the "enable" password. Description Cisco Catalyst OS is an operating system for Cisco's line of Catalyst switches. Version 7.51 of...

CVE-2003-0216

Unknown vulnerability in Cisco Catalyst 7.51 allows local users to bypass authentication and gain access to the enable mode without a password...

CVE-2003-0216

CVE-2003-0216 affects Cisco Catalyst 7.5(1) and describes a local-auth bypass that lets an attacker gain enable-mode access without a password. Root cause and exploit details are not provided in the initial documents, but multiple sources (NVD, CVE list, Nessus plugin) confirm a password bypass v...

CVE-2003-0216: Improper Authentication

Unknown vulnerability in Cisco Catalyst 7.51 allows local users to bypass authentication and gain access to the enable mode without a password...

Cisco Security Advisory: Cisco Catalyst Enable Password Bypass Vulnerability

...

Cisco Catalyst CatOS Authentication Bypass Vulnerability

Description A vulnerability has been reported for Cisco Catalyst switches that may result in unauthorized access to the enable level. The vulnerability exists due to the way the 'enable' mode is accessed through the switch. An attacker who is able to obtain command line access to a vulnerable...

Cisco Catalyst Enable Access Authentication Bypass (CSCea42030)

The remote Catalyst is affected by a password bypass vulnerability. Basically, an attacker who has a command line access may gain the 'enable' privileges without having to know the right password, which would allow him to reconfigure this host remotely. This vulnerability is documented with the...

Cisco Catalyst SSH Large Packet CPU Consumption DoS (CSCdv85279, CSCdw59394)

It is possible to make the remote CatOS crash when sending malformed SSH packets. This vulnerability is documented with the CISCO bug ID CSCdv85279 and CSCdw59394 C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid11382; scriptversion"1.26"; scriptcveid"CVE-2002-1024";...

Cisco Catalyst Switches Embedded HTTP Server Long HTTP Request DoS (CSCdy26428)

The remote switch is vulnerable to a buffer overflow in its embedded HTTP server. An attacker may use this flaw to make your switch reboot continuously, resulting in a denial of service. This vulnerability is documented with the CISCO bug ID CSCdy26428. C Tenable Network Security, Inc...

CVE-2002-2316

Cisco Catalyst 4000 series switches running CatOS 5.5.5, 6.3.5, and 7.1.2 do not always learn MAC addresses from a single initial packet, which causes unicast traffic to be broadcast across the switch and allows remote attackers to obtain sensitive network information by sniffing...