Update Protection against Cisco IOS HTTP Server Code Injection Vulnerability

The Cisco IOS Web browser interface which enables the device to perform as an HTTP server allows configuration and monitoring of a router or access server using any Web browser. A vulnerability exists in the IOS HTTP server in the CDP, a proprietary Cisco protocol used for exchanging information...

Cisco IOS CDP protocol crossite scripting

Crossite scripting is possible with CDP status...

[VulnWatch] iDefense Security Advisory 01.17.06: Cisco Systems IOS 11 Web Service CDP Status Page Code Injection Vulnerability

Cisco Systems IOS 11 Web Service CDP Status Page Code Injection Vulnerability iDefense Security Advisory 01.17.06 http://www.idefense.com/intelligence/vulnerabilities/display.php?id=372 January 17, 2006 I. BACKGROUND Cisco IOS Software is the world's leading network infrastructure software,...

CVE-2005-3921

Cross-site scripting XSS vulnerability in Cisco IOS Web Server for IOS 12.02a allows remote attackers to inject arbitrary web script or HTML by 1 packets containing HTML that an administrator views via an HTTP interface to the contents of memory buffers, as demonstrated by the URI...

CVE-2005-3921

CVE-2005-3921 is a cross-site scripting (XSS) vulnerability affecting Cisco IOS Web Server in IOS 12.0(2a). The issue allows remote attackers to inject arbitrary web script or HTML when an administrator views certain pages, via (1) HTML-containing packets shown through the HTTP interface to memor...

CVE-2005-3921: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Cisco IOS Web Server for IOS 12.02a allows remote attackers to inject arbitrary web script or HTML by 1 packets containing HTML that an administrator views via an HTTP interface to the contents of memory buffers, as demonstrated by the URI...

Kismet: Multiple vulnerabilities

Background Kismet is an 802.11 Layer 2 wireless network detector, sniffer, and intrusion detection system. Description Kismet is vulnerable to a heap overflow when handling pcap captures and to an integer underflow in the CDP protocol dissector. Impact With a specially crafted packet an attacker...

GLSA-200508-10 : Kismet: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200508-10 Kismet: Multiple vulnerabilities Kismet is vulnerable to a heap overflow when handling pcap captures and to an integer underflow in the CDP protocol dissector. Impact : With a specially crafted packet an attacker could...

CVE-2005-1942

Cisco switches that support 802.1x security are affected by CVE-2005-1942, where remote attackers can bypass port security and access the VLAN by spoofing Cisco Discovery Protocol (CDP) messages. The vulnerability arises from CDP message spoofing enabling bypass of port security, enabling partial...

CVE-2005-1942

Cisco switches that support 802.1x security allow remote attackers to bypass port security and gain access to the VLAN via spoofed Cisco Discovery Protocol CDP messages...

CVE-2005-1942: Undefined Security Weakness

Cisco switches that support 802.1x security allow remote attackers to bypass port security and gain access to the VLAN via spoofed Cisco Discovery Protocol CDP messages...

Cisco switches protected Voice VLANs protection bypass

Malformed CDP Cisco discovery protocol message opens access to voice VLAN from data VLAN...

Voice VLAN Access/Abuse Possible on Cisco voice-enabled, 802.1x-secured Interfaces

========================================================================== Title: Voice VLAN Access/Abuse Possible on Cisco voice-enabled, 802.1x-secured Interfaces Vulnerability Discovery: FishNet Security - http://www.fishnetsecurity.com Date: 06/08/2005 Severity: Medium - Voice VLAN locally...

CVE-2005-1942

Cisco switches that support 802.1x security allow remote attackers to bypass port security and gain access to the VLAN via spoofed Cisco Discovery Protocol CDP messages...

cdp buffer overflow vulnerability

Product: cdp - console cd player Versions: All Bug: Buffer overflow Impact: Attackers can execute arbitrary code Risk: Medium/High Date: March 31, 2004 Author: Shaun Colley Email: shaunige yahoo co uk WWW: http://www.nettwerked.co.uk Introduction cdp is... "cdp is a program that plays CDs at the...

CDP 0.330.4 - Console CD Player PrintTOC Function Buffer Overflow

CDP 0.330.4 - Console CD Player PrintTOC Function Buffer Overflow source: https://www.securityfocus.com/bid/10021/info It has been reported that cdp may be prone to a buffer overflow vulnerability that may allow an attacker to cause a denial of service condition in the software. The issue exists...

CVE-2001-1071

Cisco IOS 12.2 and earlier running Cisco Discovery Protocol (CDP) is affected. A remote attacker can cause memory exhaustion and a denial of service by flooding CDP neighbor announcements. Impact is memory consumption on affected devices; no public exploit details are provided in the sources. Rem...

CVE-2001-1071: Undefined Security Weakness

Cisco IOS 12.2 and earlier running Cisco Discovery Protocol CDP allows remote attackers to cause a denial of service memory consumption via a flood of CDP neighbor announcements...

Проблемы с CDP в CISCO (DoS)

Некорректные CDP-пакеты приводят к перезагрузке устройства, исчерпанию памяти и другим атакам на отказ...

Cisco Systems - Vulnerability in CDP

-----BEGIN PGP SIGNED MESSAGE----- This is not a Cisco security advisory. There is a vulnerability in how Cisco routers are handling CDP. By sending a large amount of CDP neighbor announcements it is possible to consume all available router's memory. That will cause a crash or some other abnormal...