Cisco DTA Control System and Cisco Headend System Release Denial of Service Vulnerabilities

Cisco DTACS and Cisco Headend System Release are a front-end broadband digital transmission system. A security vulnerability in Cisco DTACS and Cisco Headend System Release allows a remote attacker to send a large number of fast TCP requests, which can be used in a denial-of-service attack and...

Cisco Headend System Release Digital Broadband Delivery System CRLF Injection Vulnerability

The Cisco Headend System Release Digital Broadband Delivery System is a digital broadband delivery system. The system provides content protection, video-on-demand, and dbd backup and recovery. A CRLF injection vulnerability in the HTTP Header handler in the Digital Broadband Delivery System for...

Cisco Headend System Release UDP Denial of Service Vulnerability

The Cisco Headend System Release is a front-end broadband digital transmission system. A security vulnerability in Cisco DTACS and Cisco Headend System Release allows a remote attacker to send a large number of special UDP requests to conduct a denial-of-service attack and cause system outages...

Cisco Conductor for Videoscape and Cisco Headend System Release Arbitrary Cookie Injection Vulnerabilities

Cisco Unified MeetingPlace is a multimedia conferencing solution. The solution provides a user environment that integrates voice, video and Web conferencing. A security vulnerability exists in Cisco Conductor for Videoscape and Cisco Headend System Release, where a remote attacker sends a special...

CVE-2015-0745

Cisco Headend System Release allows remote attackers to read temporary script files or archive files, and consequently obtain sensitive information, via a crafted header in an HTTP request, aka Bug ID CSCus44909...

CVE-2015-0744

Cisco DTA Control System DTACS 4.0.0.9 and Cisco Headend System Release allow remote attackers to cause a denial of service CPU and memory consumption, and TCP service outage via 1 a SYN flood or 2 another type of TCP traffic flood, aka Bug IDs CSCus50642, CSCus50662, CSCus50625, CSCus50657, and...

CVE-2015-0743

Cisco Headend System Release allows remote attackers to cause a denial of service DHCP and TFTP outage via a flood of crafted UDP traffic, aka Bug ID CSCus04097...

Crlf injection

CRLF injection vulnerability in the HTTP Header Handler in Digital Broadband Delivery System in Cisco Headend System Release allows remote attackers to inject arbitrary HTTP headers, and conduct HTTP response splitting attacks or cross-site scripting XSS attacks, via a crafted request, aka Bug ID...

Design/Logic Flaw

Cisco Headend System Release allows remote attackers to cause a denial of service DHCP and TFTP outage via a flood of crafted UDP traffic, aka Bug ID CSCus04097...

Design/Logic Flaw

Cisco Headend System Release allows remote attackers to read temporary script files or archive files, and consequently obtain sensitive information, via a crafted header in an HTTP request, aka Bug ID CSCus44909...

CVE-2015-0733

CRLF injection vulnerability in the HTTP Header Handler in Digital Broadband Delivery System in Cisco Headend System Release allows remote attackers to inject arbitrary HTTP headers, and conduct HTTP response splitting attacks or cross-site scripting XSS attacks, via a crafted request, aka Bug ID...

CVE-2015-0733

CRLF injection vulnerability in the HTTP Header Handler in Digital Broadband Delivery System in Cisco Headend System Release allows remote attackers to inject arbitrary HTTP headers, and conduct HTTP response splitting attacks or cross-site scripting XSS attacks, via a crafted request, aka Bug ID...

CVE-2015-0743

Cisco Headend System Release allows remote attackers to cause a denial of service DHCP and TFTP outage via a flood of crafted UDP traffic, aka Bug ID CSCus04097...

CVE-2015-0744

Cisco DTA Control System DTACS 4.0.0.9 and Cisco Headend System Release allow remote attackers to cause a denial of service CPU and memory consumption, and TCP service outage via 1 a SYN flood or 2 another type of TCP traffic flood, aka Bug IDs CSCus50642, CSCus50662, CSCus50625, CSCus50657, and...

CVE-2015-0745

Cisco Headend System Release allows remote attackers to read temporary script files or archive files, and consequently obtain sensitive information, via a crafted header in an HTTP request, aka Bug ID CSCus44909...

CVE-2015-0733

Cisco Headend System Release Digital Broadband Delivery System is affected by a CRLF injection vulnerability in the HTTP Header Handler, enabling remote attackers to inject arbitrary HTTP headers and perform HTTP response-splitting attacks (potentially enabling XSS). The issue, tracked as CVE-201...

CVE-2015-0744

The CVE affects Cisco DTA Control System (DTACS) 4.0.0.9 and Cisco Headend System Release. It is caused by a lack of rate limiting in the TCP listener, enabling an unauthenticated remote attacker to trigger a denial-of-service via a TCP flood (e.g., SYN flood) that can exhaust CPU/memory and disr...

CVE-2015-0745

CVE-2015-0745 affects Cisco Headend System Release. The issue stems from improper input validation of HTTP request headers, allowing remote unauthenticated attackers to craft requests (via URL manipulation) to read temporary script or archive files and obtain sensitive information. Impact is info...

CVE-2015-0743

Cisco Headend System Release UDP DoS vulnerability (CVE-2015-0743) can be exploited remotely by sending crafted UDP traffic to TFTP and DHCP ports, causing outages. The root cause involves a specific UDP traffic pattern and high volume that can overwhelm the affected ports. Affected product is Ci...

CVE-2015-0747: Improper Input Validation

Cisco Conductor for Videoscape 3.0 and Cisco Headend System Release allow remote attackers to inject arbitrary cookies via a crafted HTTP request, aka Bug ID CSCuh25408...