CVE-2001-0753

Cisco CBOS 2.3.8 and earlier stores the passwords for 1 exec and 2 enable in cleartext in the NVRAM and a configuration file, which could allow unauthorized users to obtain the passwords and gain privileges...

CVE-2001-0753

Cisco CBOS 2.3.8 and earlier stores the passwords for 1 exec and 2 enable in cleartext in the NVRAM and a configuration file, which could allow unauthorized users to obtain the passwords and gain privileges...

CVE-2001-0753

CVE-2001-0753 affects Cisco CBOS 2.3.8 and earlier. The root cause is that passwords for exc/elevate privileges are stored in cleartext in NVRAM and a configuration file, enabling unauthorized users to obtain the credentials and gain privileges. The NVD metrics indicate a HIGH-impact, network-acc...

Security Advisory: CBOS Web-based Configuration Utility Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Cisco Security Advisory: CBOS Web-based Configuration Utility Vulnerability ====================================================================== Revision 1.0 For Public Release 2001 August 23 20:00 UTC -800...

CBOS Web-based Configuration Utility Vulnerability

...

CVE-2001-0444

Cisco CBOS 2.3.0.053 sends output of the "sh nat" aka "show nat" command to the terminal of the next user who attempts to connect to the router via telnet, which could allow that user to obtain sensitive information...

Security Advisory: More multiple vulnerabilities in CBOS

-----BEGIN PGP SIGNED MESSAGE----- Cisco Security Advisory: More multiple vulnerabilities in CBOS Revision 1.0 For public release 2001 May 22 08:00 GMT -0800 Summary Multiple vulnerabilities have been identified and fixed in CBOS, an operating system for the Cisco 600 family of routers. Cisco CBO...

More Multiple Vulnerabilities in CBOS

...

CVE-2001-0058

The CVE-2001-0058 issue affects Cisco 600 Series Routers running CBOS 2.4.1 and earlier, where the Web/HTTP interface can be forced into a denial-of-service by sending a request with a URL that does not end in a space character. The vulnerability is exposed via the Cisco CBOS web interface and is...

CVE-2001-0057

CVE-2001-0057 affects Cisco 600 routers running CBOS 2.4.1 and earlier. The vulnerability allows remote attackers to cause a denial of service by sending a large ICMP echo (ping) packet. The available documents do not specify exploitation details, affected software versions beyond CBOS 2.4.1 and ...

CVE-2001-0056

The CVE-2001-0056 entry concerns the Cisco CBOS Web Management interface. Affected software: CBOS 2.4.1 and earlier. Description: the Web Management interface does not log invalid login attempts, enabling remote attackers to guess passwords without detection. Impact: partial confidentiality and i...

CVE-2001-0055

Technical details (affected components, root cause, impact, fixes) are not provided in the connected documents. Monitor for updates.

CVE-2001-0055

CBOS 2.4.1 and earlier in Cisco 600 routers allows remote attackers to cause a denial of service via a slow stream of TCP SYN packets...

Multiple Vulnerabilities in CBOS

...

CVE-1999-0889

CVE-1999-0889 affects Cisco 675 routers running CBOS. The issue allows remote attackers to establish Telnet sessions if an exec or superuser password has not been set. This is documented across multiple sources (Cisco/Red Hat/NVD) as a remote-authentication bypass on these devices. The connected ...