PT-2015-4857

Name of the Vulnerable Software and Affected Versions Cisco Headend System Release affected versions not specified Description The issue allows remote attackers to cause a denial of service, resulting in DHCP and TFTP outage, by sending a flood of crafted UDP traffic. Recommendations At the momen...

PT-2015-4858

Name of the Vulnerable Software and Affected Versions Cisco DTA Control System DTACS version 4.0.0.9 Cisco Headend System Release affected versions not specified Description The issue allows remote attackers to cause a denial of service, resulting in CPU and memory consumption, and TCP service...

PT-2015-4859

Name of the Vulnerable Software and Affected Versions Cisco Headend System Release affected versions not specified Description The issue allows remote attackers to read temporary script files or archive files, and consequently obtain sensitive information, via a crafted header in an HTTP request...

PT-2015-4848

Name of the Vulnerable Software and Affected Versions Cisco Headend System Release affected versions not specified Description The issue allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks or cross-site scripting XSS attacks via a crafted request...

PT-2015-4860

Name of the Vulnerable Software and Affected Versions Cisco Conductor for Videoscape version 3.0 Cisco Headend System Release affected versions not specified Description The issue allows remote attackers to inject arbitrary cookies via a crafted HTTP request. Recommendations For Cisco Conductor f...

CVE-2015-0745: Exposure of Sensitive Information to an Unauthorized Actor

Cisco Headend System Release allows remote attackers to read temporary script files or archive files, and consequently obtain sensitive information, via a crafted header in an HTTP request, aka Bug ID CSCus44909...

CVE-2015-0733: Improper Neutralization of CRLF Sequences in HTTP Headers

CRLF injection vulnerability in the HTTP Header Handler in Digital Broadband Delivery System in Cisco Headend System Release allows remote attackers to inject arbitrary HTTP headers, and conduct HTTP response splitting attacks or cross-site scripting XSS attacks, via a crafted request, aka Bug ID...

CVE-2015-0743: Undefined Security Weakness

Cisco Headend System Release allows remote attackers to cause a denial of service DHCP and TFTP outage via a flood of crafted UDP traffic, aka Bug ID CSCus04097...

CVE-2015-0744: Undefined Security Weakness

Cisco DTA Control System DTACS 4.0.0.9 and Cisco Headend System Release allow remote attackers to cause a denial of service CPU and memory consumption, and TCP service outage via 1 a SYN flood or 2 another type of TCP traffic flood, aka Bug IDs CSCus50642, CSCus50662, CSCus50625, CSCus50657, and...

Cisco Headend System Release UDP TFTP and DHCP Denial of Service Vulnerability

A vulnerability in the UDP applications TFTP and DHCP of Cisco Headend System Release could allow an unauthenticated, remote attacker to take the TFTP and DHCP listening ports offline for a period of time. The vulnerability is due to a particular UDP traffic pattern in addition to the amount of U...

Cisco Conductor for Videoscape and Cisco Headend System Release HTTP Injection Vulnerability

A vulnerability in the Cisco Conductor for Videoscape and Cisco Headend System Releases could allow an unauthenticated, remote attacker to inject arbitrary HTTP cookies via an HTTP request. The vulnerability is due to improper input validation of an HTTP request header. An attacker could exploit...

Cisco Headend System Release Archive File Download Vulnerability

A vulnerability in Cisco Headend System Release could allow an unauthenticated, remote attacker to download temporary script files. The vulnerability is due to improper input validation of the HTTP request header. An attacker could exploit this vulnerability by manipulating the URL of an HTTP...