CVE-2008-3818: Improper Input Validation

Cisco ONS 15310-CL, 15310-MA, 15327, 15454, 15454 SDH, and 15600 with software 7.0.2 through 7.0.6, 7.2.2, 8.0.x, 8.5.1, and 8.5.2 allows remote attackers to cause a denial of service control-card reset via a crafted TCP session...

Cisco ONS Control Card远程拒绝服务漏洞

BUGTRAQ ID: 33261 CVE ID：CVE-2008-3818 CNCVE ID：CNCVE-20083818 Cisco 15310-CL, 15310-MA, ONS 15327, ONS 15454, ONS 15454 SDH和ONS 15600硬件通过CTX, CTX2500, XTC, TCC/TCC+/TCC2/TCC2P, TCCi/TCC2/TCC2P和TSC控制卡管理，这些控制卡通常连接数据通信网络DCN，DCN用于在管理端点和网络实体进行管理信息传送。DCN的定义有时又叫为Management Communication Network...

CVE-2004-1432

CVE-2004-1432 applies to Cisco ONS platforms: ONS 15327, ONS 15454, and ONS 15454 SDH across multiple releases (e.g., 4.6(0)/4.6(1), 4.5.x, 4.1(0)–4.1(3), 4.0(0)–4.0(2) and earlier). The issue allows remote attackers to cause a denial of service (control card reset) by sending malformed IP or ICM...

CVE-2004-1435

CVE-2004-1435 affects Cisco ONS platforms (ONS 15327, ONS 15454, and ONS 15454 SDH) across multiple firmware versions (e.g., 4.6(0)/4.6(1), 4.5.x, 4.1.x, 4.0.x and earlier). The issue enables remote attackers to trigger a denial-of-service (control card reset) by opening a large number of TCP con...

CVE-2004-1436

The CVE-2004-1436 issue affects Cisco ONS TL1 login interfaces on Cisco ONS 15327 (4.6(0)/4.6(1)) and 15454/15454 SDH (4.6(0)/4.6(1)). It allows remote authenticated access by logging in with a password longer than 10 characters when the account password is blank, enabling unauthorized access. Th...

CVE-2004-1435: Undefined Security Weakness

Multiple versions of Cisco ONS 15327, ONS 15454, and ONS 15454 SDH, including 4.60 and 4.61, 4.5x, 4.10 to 4.13, 4.00 to 4.02, and earlier versions, allows remote attackers to cause a denial of service control card reset via a large number of TCP connections with an invalid response instead of th...

CVE-2004-1433: Undefined Security Weakness

Multiple versions of Cisco ONS 15327, ONS 15454, and ONS 15454 SDH, including 4.60 and 4.61, 4.5x, 4.10 to 4.13, 4.00 to 4.02, and earlier versions, and ONS 15600 1.xx, allows remote attackers to cause a denial of service control card reset via malformed 1 TCP and 2 UDP packets...

CVE-2004-1434: Undefined Security Weakness

Multiple versions of Cisco ONS 15327, ONS 15454, and ONS 15454 SDH, including 4.10 to 4.12, 4.5x, 4.00 to 4.02, and earlier versions, allows remote attackers to cause a denial of service control card reset via malformed SNMP packets...

CVE-2004-1432: Undefined Security Weakness

Multiple versions of Cisco ONS 15327, ONS 15454, and ONS 15454 SDH, including 4.60 and 4.61, 4.5x, 4.10 to 4.13, 4.00 to 4.02, and earlier versions, allows remote attackers to cause a denial of service control card reset via malformed 1 IP or 2 ICMP packets...

CVE-2004-1436: Undefined Security Weakness

The Transaction Language 1 TL1 login interface in Cisco ONS 15327 4.60 and 4.61 and 15454 and 15454 SDH 4.60 and 4.61, when a user account is configured with a blank password, allows remote attackers to gain unauthorized access by logging in with a password larger than 10 characters...

CVE-2004-1436

The Transaction Language 1 TL1 login interface in Cisco ONS 15327 4.60 and 4.61 and 15454 and 15454 SDH 4.60 and 4.61, when a user account is configured with a blank password, allows remote attackers to gain unauthorized access by logging in with a password larger than 10 characters...

CVE-2004-0306

Cisco ONS 15327 before 4.13, ONS 15454 before 4.61, ONS 15454 SD before 4.13, and Cisco ONS 15600 before 1.30 enable TFTP service on UDP port 69 by default, which allows remote attackers to GET or PUT ONS system files on the current active TCC in the /flash0 or /flash1 directories...

CVE-2004-0307: Undefined Security Weakness

Cisco ONS 15327 before 4.13, ONS 15454 before 4.61, and ONS 15454 SD before 4.13 allows remote attackers to cause a denial of service reset by not sending the ACK portion of the TCP three-way handshake and sending an invalid response instead...

Cisco ONS 15327, ONS 15454, ONS 15454 SDH, and ONS 15600 Malformed Packet Vulnerabilities

...

CVE-2004-0308: Undefined Security Weakness

Unknown vulnerability in Cisco ONS 15327 before 4.13, ONS 15454 before 4.61, ONS 15454 SD before 4.13, and Cisco ONS15600 before 1.30 allows a superuser whose account is locked out, disabled, or suspended to gain unauthorized access via a Telnet connection to the VxWorks shell...