24 matches found
EUVD-2008-3805
Malware in sbrugna...
EUVD-2016-7322
Malware in sbrugna...
EUVD-2016-2396
Malware in sbrugna...
EUVD-2010-2828
Malware in sbrugna...
EUVD-2010-2829
Malware in sbrugna...
EUVD-2012-3041
Malware in sbrugna...
CVE-2010-2824
Unspecified vulnerability on the Cisco Application Control Engine ACE Module with software A21.x before A21.6, A22.x before A22.3, and A23.x before A23.1 for Catalyst 6500 series switches and 7600 series routers allows remote attackers to cause a denial of service device reload via a sequence of...
CVE-2010-2822
Unspecified vulnerability in the RTSP inspection feature on the Cisco Application Control Engine ACE Module with software before A23.2 for Catalyst 6500 series switches and 7600 series routers, and the Cisco Application Control Engine ACE 4710 appliance with software before A32.6, allows remote...
CVE-2010-2825
Unspecified vulnerability in the SIP inspection feature on the Cisco Application Control Engine ACE Module with software A21.x before A21.6, A22.x before A22.3, and A23.x before A23.1 for Catalyst 6500 series switches and 7600 series routers, and the Cisco Application Control Engine ACE 4710...
CVE-2016-1297: Improper Neutralization of Special Elements used in an OS Command
The Device Manager GUI in Cisco Application Control Engine ACE 4710 A5 before A53.1 allows remote authenticated users to bypass intended RBAC restrictions and execute arbitrary CLI commands with admin privileges via an unspecified parameter in a POST request, aka Bug ID CSCul84801...
CVE-2015-6265: Undefined Security Weakness
The CLI in Cisco Application Control Engine ACE 4700 A5 3.0 and earlier allows local users to bypass intended access restrictions, and read or write to files, by entering an unspecified CLI command with a crafted file as this command's input, aka Bug ID CSCur23662...
Cisco Application Control Engine Login Administrator IP Address Overlap (cisco-sa-20120620-ace)
The Cisco Application Control Engine ACE software installed on the remote Cisco IOS device is earlier than A42.3 / A51.1. It, therefore, potentially does not properly share a management IP address among multiple contexts when multicontext mode is enabled. This might allow an administrative user t...
CVE-2012-3919: Undefined Security Weakness
The Cisco Application Control Engine ACE module 3.0 for Cisco Catalyst switches and Cisco routers does not properly monitor Load Balancer LB queues, which allows remote attackers to cause a denial of service incorrect memory access and module reboot via application traffic, aka Bug ID CSCtw70879...
CVE-2012-3063: Concurrent Execution using Shared Resource with Improper Synchronization
Cisco Application Control Engine ACE before A42.3 and A5 before A51.1, when multicontext mode is enabled, does not properly share a management IP address among multiple contexts, which allows remote authenticated administrators to bypass intended access restrictions in opportunistic circumstances...
Design/Logic Flaw
Unspecified vulnerability on the Cisco Application Control Engine ACE Module with software A21.x before A21.6, A22.x before A22.3, and A23.x before A23.1 for Catalyst 6500 series switches and 7600 series routers allows remote attackers to cause a denial of service device reload via a sequence of...
CVE-2010-2824: Undefined Security Weakness
Unspecified vulnerability on the Cisco Application Control Engine ACE Module with software A21.x before A21.6, A22.x before A22.3, and A23.x before A23.1 for Catalyst 6500 series switches and 7600 series routers allows remote attackers to cause a denial of service device reload via a sequence of...
CVE-2010-2823: Undefined Security Weakness
Unspecified vulnerability in the deep packet inspection feature on the Cisco Application Control Engine ACE 4710 appliance with software before A32.6 allows remote attackers to cause a denial of service device reload via crafted HTTP packets, related to HTTP, RTSP, and SIP inspection, aka Bug ID...
CVE-2010-2822: Undefined Security Weakness
Unspecified vulnerability in the RTSP inspection feature on the Cisco Application Control Engine ACE Module with software before A23.2 for Catalyst 6500 series switches and 7600 series routers, and the Cisco Application Control Engine ACE 4710 appliance with software before A32.6, allows remote...
CVE-2010-2825: Undefined Security Weakness
Unspecified vulnerability in the SIP inspection feature on the Cisco Application Control Engine ACE Module with software A21.x before A21.6, A22.x before A22.3, and A23.x before A23.1 for Catalyst 6500 series switches and 7600 series routers, and the Cisco Application Control Engine ACE 4710...
Cisco Application Control Engine (ACE) - HTTP Parsing Security
Cisco Application Control Engine ACE - HTTP Parsing Security source: https://www.securityfocus.com/bid/40002/info Cisco Application Control Engine ACE is prone to a security weakness that may allow attackers to obfuscate HTTP server log entries. Attackers can exploit this issue to avoid having...