Cisco IOS Smart Install远程代码执行漏洞

BUGTRAQ ID: 49828 CVE ID: CVE-2011-3271 Cisco的网际操作系统（IOS）是一个网际互连优化的复杂操作系统。 Cisco IOS的Smart Install功能在实现上存在漏洞，远程非法攻击者可利用此漏洞在受影响设备上执行任意代码。 此漏洞源于运行Cisco IOS Software的Cisco Catalyst Switches中的Smart Install功能，Smart Install使用TCP端口4786进行通信，要触发此漏洞需要完整的TCP三方握手的连接。 Cisco IOS 15.x Cisco IOS 12.x 厂商补丁： Cisco...

Cisco Releases Security Advisory for Cisco IOS Software Smart Install

Cisco has released a security advisory to address a vulnerability in the Cisco IOS Software Install feature running on Cisco Catalyst Switches. Exploitation of this vulnerability may allow remote code execution by an unauthenticated attacker. US-CERT encourages administrators to review Cisco...

Cisco IOS Software Smart Install Remote Code Execution Vulnerability (cisco-sa-20110928-smart-install)

A vulnerability exists in the Smart Install feature of Cisco Catalyst Switches running Cisco IOS Software that could allow an unauthenticated, remote attacker to perform remote code execution on the affected device. Cisco has released free software updates that address this vulnerability. There a...

Cisco IOS Software Smart Install Remote Code Execution Vulnerability

A vulnerability exists in the Smart Install feature of Cisco Catalyst Switches running Cisco IOS Software that could allow an unauthenticated, remote attacker to perform remote code execution on the affected device. Cisco has released software updates that address this vulnerability. There are no...

PT-2011-4360

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.2 through 15.1 Description A vulnerability exists in the Smart Install feature of Cisco IOS Software, allowing an unauthenticated, remote attacker to execute arbitrary code or cause a denial of service via crafted TCP...

CVE-2011-3816: Exposure of Sensitive Information to an Unauthorized Actor

WEBinsta mailing list manager 1.3e allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by install/install3.php and certain other files...

CVE-2011-3765: Exposure of Sensitive Information to an Unauthorized Actor

Open-Realty 2.5.8 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by install/versions/upgrade115.inc.php and certain other files...

PT-2011-4655

Name of the Vulnerable Software and Affected Versions Open-Realty version 2.5.8 Description The issue allows remote attackers to obtain sensitive information via a direct request to a .php file. This is achieved by accessing specific files, such as install/versions/upgrade 115.inc.php, which...

PT-2011-4706

Name of the Vulnerable Software and Affected Versions WEBinsta mailing list manager version 1.3e Description The issue allows remote attackers to obtain sensitive information via a direct request to certain .php files, which reveals the installation path in an error message. This can be...

CVE-2011-3736: Exposure of Sensitive Information to an Unauthorized Actor

ExoPHPDesk 1.2.1 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by upgrades/upgrade9.php and certain other files...

Ubuntu Update for gimp USN-1214-1

Ubuntu Update for Linux kernel vulnerabilities USN-1214-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN12141.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for gimp USN-1214-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This...

Fedora Update for maniadrive FEDORA-2011-11537

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Ubuntu Update for librsvg USN-1206-1

Ubuntu Update for Linux kernel vulnerabilities USN-1206-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN12061.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for librsvg USN-1206-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This...

Fedora Update for perl-Gtk2-MozEmbed FEDORA-2011-12275

Check for the Version of perl-Gtk2-MozEmbed OpenVAS Vulnerability Test Fedora Update for perl-Gtk2-MozEmbed FEDORA-2011-12275 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

Fedora Update for hplip FEDORA-2011-11189

Check for the Version of hplip OpenVAS Vulnerability Test Fedora Update for hplip FEDORA-2011-11189 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms...

Fedora Update for librsvg2 FEDORA-2011-12271

Check for the Version of librsvg2 OpenVAS Vulnerability Test Fedora Update for librsvg2 FEDORA-2011-12271 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora Update for perl-Data-FormValidator FEDORA-2011-11805

Check for the Version of perl-Data-FormValidator OpenVAS Vulnerability Test Fedora Update for perl-Data-FormValidator FEDORA-2011-11805 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute...

Fedora Update for hplip FEDORA-2011-11199

Check for the Version of hplip OpenVAS Vulnerability Test Fedora Update for hplip FEDORA-2011-11199 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms...

Fedora Update for avahi FEDORA-2011-11588

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for thunderbird FEDORA-2011-12280

Check for the Version of thunderbird OpenVAS Vulnerability Test Fedora Update for thunderbird FEDORA-2011-12280 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...