CVE-2005-3921: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Cisco IOS Web Server for IOS 12.02a allows remote attackers to inject arbitrary web script or HTML by 1 packets containing HTML that an administrator views via an HTTP interface to the contents of memory buffers, as demonstrated by the URI...

Kismet: Multiple vulnerabilities

Background Kismet is an 802.11 Layer 2 wireless network detector, sniffer, and intrusion detection system. Description Kismet is vulnerable to a heap overflow when handling pcap captures and to an integer underflow in the CDP protocol dissector. Impact With a specially crafted packet an attacker...

GLSA-200508-10 : Kismet: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200508-10 Kismet: Multiple vulnerabilities Kismet is vulnerable to a heap overflow when handling pcap captures and to an integer underflow in the CDP protocol dissector. Impact : With a specially crafted packet an attacker could...

CVE-2005-1942

Cisco switches that support 802.1x security are affected by CVE-2005-1942, where remote attackers can bypass port security and access the VLAN by spoofing Cisco Discovery Protocol (CDP) messages. The vulnerability arises from CDP message spoofing enabling bypass of port security, enabling partial...

CVE-2005-1942

Cisco switches that support 802.1x security allow remote attackers to bypass port security and gain access to the VLAN via spoofed Cisco Discovery Protocol CDP messages...

CVE-2005-1942: Undefined Security Weakness

Cisco switches that support 802.1x security allow remote attackers to bypass port security and gain access to the VLAN via spoofed Cisco Discovery Protocol CDP messages...

Voice VLAN Access/Abuse Possible on Cisco voice-enabled, 802.1x-secured Interfaces

========================================================================== Title: Voice VLAN Access/Abuse Possible on Cisco voice-enabled, 802.1x-secured Interfaces Vulnerability Discovery: FishNet Security - http://www.fishnetsecurity.com Date: 06/08/2005 Severity: Medium - Voice VLAN locally...

Cisco switches protected Voice VLANs protection bypass

Malformed CDP Cisco discovery protocol message opens access to voice VLAN from data VLAN...

CVE-2005-1942

Cisco switches that support 802.1x security allow remote attackers to bypass port security and gain access to the VLAN via spoofed Cisco Discovery Protocol CDP messages...

cdp buffer overflow vulnerability

Product: cdp - console cd player Versions: All Bug: Buffer overflow Impact: Attackers can execute arbitrary code Risk: Medium/High Date: March 31, 2004 Author: Shaun Colley Email: shaunige yahoo co uk WWW: http://www.nettwerked.co.uk Introduction cdp is... "cdp is a program that plays CDs at the...

CDP 0.330.4 - Console CD Player PrintTOC Function Buffer Overflow

CDP 0.330.4 - Console CD Player PrintTOC Function Buffer Overflow source: https://www.securityfocus.com/bid/10021/info It has been reported that cdp may be prone to a buffer overflow vulnerability that may allow an attacker to cause a denial of service condition in the software. The issue exists...

CVE-2001-1071

Cisco IOS 12.2 and earlier running Cisco Discovery Protocol (CDP) is affected. A remote attacker can cause memory exhaustion and a denial of service by flooding CDP neighbor announcements. Impact is memory consumption on affected devices; no public exploit details are provided in the sources. Rem...

CVE-2001-1071: Undefined Security Weakness

Cisco IOS 12.2 and earlier running Cisco Discovery Protocol CDP allows remote attackers to cause a denial of service memory consumption via a flood of CDP neighbor announcements...

Cisco IOS vulnerable to denial of service via Cisco Discovery Protocol

Overview The Cisco IOS contains a denial-of-service vulnerability that allows nearby remote attackers to crash or temporarily disable affected network devices. Description The Cisco Internetwork Operating System IOS contains a vulnerability in its processing of Cisco Discovery Protocol CDP packet...

Проблемы с CDP в CISCO (DoS)

Некорректные CDP-пакеты приводят к перезагрузке устройства, исчерпанию памяти и другим атакам на отказ...

Cisco Systems - Vulnerability in CDP

-----BEGIN PGP SIGNED MESSAGE----- This is not a Cisco security advisory. There is a vulnerability in how Cisco routers are handling CDP. By sending a large amount of CDP neighbor announcements it is possible to consume all available router's memory. That will cause a crash or some other abnormal...

CVE-2001-1071

Cisco IOS 12.2 and earlier running Cisco Discovery Protocol CDP allows remote attackers to cause a denial of service memory consumption via a flood of CDP neighbor announcements...

Cisco CDP attacks

Folks, when playing around with CDP, I discovered several interesting things. Due the leak of Cisco hardware around here, I ask you for your expiriences. Details as follows: Program: http://www.phenoelit.de/irpas/cdp.c Known effekts: -IOS 11.11: when flooding the cisco with random deviceID update...

CVE-1999-0453

CVE-1999-0453 concerns Cisco devices being identifiable by sending a SYN packet to UDP/TCP port 1999 (CDP). The connected PT-1999-1136 entry notes affected Cisco versions are not specified and there is no information about a fix at this time; other sources merely reiterate the discovery via port ...

CVE-1999-0453: Exposure of Sensitive Information to an Unauthorized Actor

An attacker can identify a CISCO device by sending a SYN packet to port 1999, which is for the Cisco Discovery Protocol CDP...