CVE-2014-2142

Cisco ONS 15454 controller cards with software 10.0 and earlier allow remote attackers to cause a denial of service card reload via a crafted HTTP URI, aka Bug ID CSCun06870...

CVE-2014-2139

Cisco ONS 15454 controller cards with software 9.6 and earlier allow remote attackers to cause a denial of service flash write outage via a TCP FIN attack that triggers file-descriptor exhaustion, aka Bug ID CSCug97315...

CVE-2014-2139

Cisco CVE-2014-2139 affects Cisco ONS 15454 Controller Cards running software 9.6 and earlier. The flaw allows an unauthenticated, remote attacker to trigger a FIN attack that exhausts file descriptors, preventing access to flash memory and causing a denial of service. The root cause is exhaustio...

CVE-2014-2141

The session-termination functionality on Cisco ONS 15454 controller cards with software 9.6 and earlier does not initialize an unspecified pointer, which allows remote authenticated users to cause a denial of service card reset via crafted session-close actions, aka Bug ID CSCug97416...

Session fixation

The session-termination functionality on Cisco ONS 15454 controller cards with software 9.6 and earlier does not initialize an unspecified pointer, which allows remote authenticated users to cause a denial of service card reset via crafted session-close actions, aka Bug ID CSCug97416...

CVE-2014-2141

The session-termination functionality on Cisco ONS 15454 controller cards with software 9.6 and earlier does not initialize an unspecified pointer, which allows remote authenticated users to cause a denial of service card reset via crafted session-close actions, aka Bug ID CSCug97416...

CVE-2014-2141

CVE-2014-2141 affects Cisco ONS 15454 Controller Cards (software 9.6 and earlier). The root cause is an uninitialized pointer in the session-termination function, which allows an authenticated, remote attacker to cause a denial of service (card reset) via crafted session-close actions. Cisco’s ad...

Cisco ONS 15454控制卡拒绝服务漏洞

CVE ID:CVE-2014-2139 Cisco ONS 15454是一款多业务传输平台。 Cisco ONS 15454控制卡代码功能存在漏洞，当遭遇FIN攻击中消耗完文件描述符时会触发该漏洞，攻击者可对控制卡发送FIN攻击，阻止系统写问控制卡上的Flash内存，而进行拒绝服务攻击。 0 Cisco ONS 15454 System Software 目前厂商已经发布了升级补丁以修复漏洞，请下载使用： http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2139...

Cisco ONS 15454控制卡会话终止拒绝服务漏洞

CVE ID:CVE-2014-2141 Cisco ONS 15454是一款多业务传输平台。 Cisco ONS 15454控制卡会话终止功能存在漏洞，漏洞是由于未初始化指针，攻击者可利用此漏洞以特定方式关闭会话，使控制卡重置。 0 Cisco ONS 15454 System Software 目前厂商已经发布了升级补丁以修复漏洞，请下载使用： http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2141...

Cisco ONS 15454控制卡不正确指令拒绝服务漏洞

CVE ID:CVE-2014-2140 Cisco ONS 15454是一款多业务传输平台 。 Cisco ONS 15454控制卡WEB接口代码存在安全漏洞，漏洞是由于不正确处理指令加载控制卡。在FIN攻击过程中消耗完文件描述符时，CAL管道会无法打开，攻击者可向控制卡发送FIN攻击来利用该漏洞，触发控制卡重载。 0 Cisco ONS 15454 System Software 目前厂商已经发布了升级补丁以修复漏洞，请下载使用： http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2...

Cisco ONS 15454控制卡HTTP URI拒绝服务漏洞

Bugtraq ID:66686 CVE ID:CVE-2014-2142 Cisco ONS 15454是一款多业务传输平台。 Cisco ONS 15454控制卡WEB接口存在安全漏洞，由于不正确解析HTTP URI，允许攻击者发送特制的HTTP请求，可使控制卡重载。 0 Cisco ONS 15454 System Software 目前厂商已经发布了升级补丁以修复漏洞，请下载使用： http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2142...

Cisco ONS 15454 Controller Card DoS (CSCug97348)

A vulnerability exists in Cisco ONS 15454 Controller Cards that could allow an unauthenticated, remote attacker to cause the control card to reset, resulting in a denial of service condition. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid73456; scriptversion"1.4";...

Cisco ONS 15454 Controller Card DoS (CSCun06870)

A vulnerability exists in Cisco ONS 15454 Controller Cards that could allow an unauthenticated, remote attacker to cause the control card to reset, resulting in a denial of service condition. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid73458; scriptversion"1.4";...

Cisco ONS 15454 Controller Card DoS (CSCug97416)

A vulnerability exists in Cisco ONS 15454 Controller Cards that could allow an authenticated, remote attacker to cause the control card to reset, resulting in a denial of service condition. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid73457; scriptversion"1.4";...

Cisco ONS 15454 Controller Card DoS (CSCug97315)

A vulnerability exists in Cisco ONS 15454 Controller Cards that could allow an unauthenticated, remote attacker to prevent system access to the flash memory on the control card, resulting in a denial of service condition. C Tenable Network Security, Inc. include"compat.inc"; if description...

Cisco ONS 15454 Controller Card Denial of Service Vulnerability

A vulnerability in the session termination function of the Cisco ONS 15454 Controller Cards could allow an authenticated, remote attacker to cause the control card to reset. The vulnerability is due to an uninitialized pointer. An attacker could exploit this vulnerability by closing sessions in a...

Cisco ONS 15454 Controller Card Denial of Service Vulnerability

A vulnerability in the code of the Cisco ONS 15454 Controller Cards could allow an unauthenticated, remote attacker to cause the control card to reset. The vulnerability is due to improper instructions to reload the controller card. A CAL pipe fails to open when the file descriptors are exhausted...

Cisco ONS 15454 Controller Card Denial of Service Vulnerability

A vulnerability in the code of the Cisco ONS 15454 Controller Cards could allow an unauthenticated, remote attacker to prevent system access to the flash memory on the control card. The vulnerability is caused when the file descriptors are exhausted during a FIN attack. An attacker could exploit...

Confluence Administrator Can Add Himself to System Administrator Group

I have found what I believe to be a security bug in Confluence that should be fixed. We have System Administrator function from the Confluence Administrator Group, and created a new Group called System Administrators see attachment. The purpose was to give our Tech Writers the ability to access t...

CVE-2013-6701

The tNetTaskLimit process on the Transport Node Controller TNC on Cisco ONS 15454 devices with software 9.6 and earlier does not properly prioritize health pings, which allows remote attackers to cause a denial of service watchdog timeout and TNC reset via a flood of network traffic, aka Bug ID...