CVE-2008-2054

CVE-2008-2054 affects CiscoWorks Common Services versions 3.0.3 through 3.1.1. The Cisco advisory and accompanying sources describe a remote arbitrary-code execution vulnerability exploitable by an attacker from the network, leading to code execution on the user’s client machine. Cisco’s document...

CVE-2008-2054

Unspecified vulnerability in Cisco CiscoWorks Common Services 3.0.3 through 3.1.1 allows remote attackers to execute arbitrary code on a client machine via unknown vectors...

Cisco multiple applications code execution

CiscoWorks Common Services code execution...

Cisco Security Advisory: CiscoWorks Common Services Arbitrary Code Execution Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: CiscoWorks Common Services Arbitrary Code Execution Vulnerability Advisory ID: cisco-sa-20080528-cw Revision 1.0 For Public Release 2008 May 28 1600 UTC GMT +--------------------------------------------------------------------...

CiscoWorks Common Services Arbitrary Code Execution Vulnerability

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

CiscoWorks Internetwork Performance Monitor远程命令执行漏洞

BUGTRAQ ID: 28249 CVECAN ID: CVE-2008-1157 CiscoWorks IPM是可测量网络响应时间和可用性的故障检测应用。 Solaris和Windows平台上的的IPM 2.6版中的一个进程可导致将命令shell自动绑定到随机选择的TCP端口上，未经认证的远程用户可以连接到开放的端口上并在Solaris系统上以casuser权限或在Windows系统上以SYSTEM权限执行任意命令。 Cisco Internetwork Performance Monitor 2.6 厂商补丁： Cisco -----...

Cisco CiscoWorks Internetwork Performance Monitor code execution

It's possible to execute commands without authentication...

Cisco Security Advisory: CiscoWorks Internetwork Performance Monitor Remote Command Execution Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: CiscoWorks Internetwork Performance Monitor Remote Command Execution Vulnerability Advisory ID: cisco-sa-20080313-ipm Revision 1.0 For Public Release 2008 March 13 Summary ======= CiscoWorks Internetwork Performance Monitor IP...

Command injection

Cisco CiscoWorks Internetwork Performance Monitor IPM 2.6 creates a process that executes a command shell and listens on a randomly chosen TCP port, which allows remote attackers to execute arbitrary commands...

DSquare Exploit Pack: D2SEC_CISCOIPM

Name| d2secciscoipm ---|--- CVE| CVE-2008-1157 Exploit Pack| D2ExploitPack Description| Cisco CiscoWorks Internetwork Performance Monitor Remote Command Execution Vulnerability Notes|...

CVE-2008-1157

Cisco CiscoWorks Internetwork Performance Monitor IPM 2.6 creates a process that executes a command shell and listens on a randomly chosen TCP port, which allows remote attackers to execute arbitrary commands...

CVE-2008-1157

Cisco CiscoWorks Internetwork Performance Monitor IPM 2.6 creates a process that executes a command shell and listens on a randomly chosen TCP port, which allows remote attackers to execute arbitrary commands...

CiscoWorks Internetwork Performance Monitor Remote Command Execution Vulnerability

...

Cross site scripting

Cross-site scripting XSS vulnerability in the login page in Cisco CiscoWorks Server CS, possibly 2.6 and earlier, when using CiscoWorks Common Services 3.0.x and 3.1, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2007-5582

Cross-site scripting XSS vulnerability in the login page in Cisco CiscoWorks Server CS, possibly 2.6 and earlier, when using CiscoWorks Common Services 3.0.x and 3.1, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2007-5582

CiscoWorks Server/XSS in the Common Services login page (CS) affects CS 3.0.x and 3.1, possibly earlier 2.6, allowing remote injection of arbitrary script or HTML via unspecified vectors. The vulnerability is documented as a cross-site scripting issue in the login page; the provided sources do no...

Advisory: Cross Site Scripting in CiscoWorks

December 5th, 2007 ======= Summary ======= Name: Cross Site Scripting in CiscoWorks Release Date: 05 December 2007 Reference: LSD001-2007 Discover: Dave Lewis Vendor: Cisco Systems Affected: CiscoWorks version 2.6 as tested All prior builds are affected Risk: Medium Status: Published Reference:...

CiscoWorks crossite scripting

No description provided...

CVE-2007-5382

The conversion utility for converting CiscoWorks Wireless LAN Solution Engine WLSE 4.1.91.0 and earlier to Cisco Wireless Control System WCS creates administrator accounts with default usernames and passwords, which allows remote attackers to gain privileges...

Default credentials

The conversion utility for converting CiscoWorks Wireless LAN Solution Engine WLSE 4.1.91.0 and earlier to Cisco Wireless Control System WCS creates administrator accounts with default usernames and passwords, which allows remote attackers to gain privileges...