CVE-2004-0551

Cisco CatOS TCP-ACK handling vulnerability (CVE-2004-0551) affects CatOS on Cisco Catalyst switches: 5.x before 5.5(20) through 8.x before 8.2(2) and 8.3(2)GLX. A remote attacker can cause a denial of service (system crash/reload) by sending invalid packets instead of the final ACK in the TCP thr...

Cisco CatOS TCP ACK handling vulnerability

Overview A vulnerability in Cisco CatOS may allow a remote attacker to cause a denial of service on an affected device. Description Cisco's CatOS is an operating system that runs on some Cisco Catalyst switch products. A vulnerability in the way that TCP services on CatOS handle malformed...

Cisco CatOS TCP-ACK Remote DoS (CSCec42751, CSCed45576, CSCed48590)

The remote switch is vulnerable to various flaws that could allow an attacker to disable this device remotely by doing a TCP-ACK denial of service attack. This vulnerability is documented with the CISCO bugs ID CSCec42751, CSCed45576 and CSCed48590. C Tenable Network Security include"compat.inc";...

Cisco CatOS incomplete TCP session DoS

Invalid packet on 3rd TCP handshake stage causes device to fail if telnet, ssh or HTTP are enabled...

Cisco Security Advisory: Cisco CatOS Telnet, HTTP and SSH Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco CatOS Telnet, HTTP and SSH Vulnerability Revision 1.0 For Public Release 2004 June 9 at 1600 UTC GMT ---------------------------------------------------------------------- Contents Summary Affected Products Details Impac...

Cisco CatOS Telnet, HTTP and SSH Vulnerability

...

Cisco 6509 switch telnet vulnerability

A vulnerability has been found on Cisco 6509 switches. The vulnerability was found to work on 2 different Cisco 6509 switches running CATOS 5.42 and 5.52. The vulnerability can lead to information and commands being exectued on the remote switch from the login prompt. Commands can be exectued at...

Cisco Security Advisory: Denial-of-Service of TCP-based Services in CatOS

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Denial-of-Service of TCP-based Services in CatOS Revision 1.0 For Public Release 2003 July 09 at 16:00 UTC GMT - ------------------------------------------------------------------------- Summary ====== After receiving eight TC...

Denial-of-Service of TCP-based Services in CatOS

...

CVE-2002-1222

Buffer overflow in the embedded HTTP server for Cisco Catalyst switches running CatOS 5.4 through 7.3 allows remote attackers to cause a denial of service reset via a long HTTP request...

Cisco Security Advisory: Cisco CatOS Embedded HTTP Server Buffer Overflow

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco CatOS Embedded HTTP Server Buffer Overflow Revision 1.0 FINAL ================== For Public Release 2002 October 16 17:00 UTC - ------------------------------------------------------------------------------ Please provid...

Cisco CatOS Embedded HTTP Server Buffer Overflow

...

Cisco CatOS 5.x6.17.37.4 - CiscoView HTTP Server Buffer Overflow

Cisco CatOS 5.x6.17.37.4 - CiscoView HTTP Server Buffer Overflow source: https://www.securityfocus.com/bid/5976/info Certain versions of Cisco CatOS ship with an embedded HTTP server. Switches that run these versions of CatOS are prone to a denial of service, which is due to a remote buffer...

Cisco CatOS 5.x/6.1/7.3/7.4 - CiscoView HTTP Server Buffer Overflow

source: https://www.securityfocus.com/bid/5976/info Certain versions of Cisco CatOS ship with an embedded HTTP server. Switches that run these versions of CatOS are prone to a denial of service, which is due to a remote buffer overflow condition in the HTTP server. This issue is reported to affec...

Cisco CatOS Telnet Buffer Vulnerability

...

Cisco IOS and CatOS fail to properly validate ARP packets thereby overwriting device's MAC address in ARP table

Overview There is a denial-of-service vulnerability in specific versions of Cisco IOS or CatOS. Description A denial-of-service vulnerability exists in specific versions of Cisco IOS or CatOS. This vulnerability can cause the device to crash or become unavailable if specially crafted arp packets...

Cisco CatOS VACM read-write Community String Device Configuration Manipulation

It is possible to obtain the remote private community strings using the View-Based Access Control MIB VACM of the remote Cisco router. An attacker may use this flaw to gain read/write SNMP access on this router. Note that a value in this table does not necessarily mean that an instance with the...

Cisco IOS/CatOS exposes read-write SNMP community string via traversal of View-based Access Control MIB (VACM) using read-only community string

Overview There is a vulnerability that permits unauthorized access to several switch and router products manufactured by Cisco Systems. An attacker who gains access to an affected device can read and modify its configuration, creating a denial-of-service condition, an information leak, or both...