Cisco NX-OS Software TACACS+ Command Authorization Vulnerability (Cisco-SA-20140123-CVE-2014-0676)

A vulnerability in the TACACS+ command authorization code of Cisco NX-OS Software could allow an authenticated, local attacker to execute certain commands without TACACS+ server authorization. Copyright C 2014 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced...

Cisco IOS Software Command Authorization Bypass

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

CVE-2006-0485

The TCL shell in Cisco IOS 12.214S before 12.214S16, 12.218S before 12.218S11, and certain other releases before 25 January 2006 does not perform Authentication, Authorization, and Accounting AAA command authorization checks, which may allow local users to execute IOS EXEC commands that were...