CVE-2006-1672

The CVE-2006-1672 entry affects Cisco Optical Networking System (ONS) 15000 series nodes via Cisco Transport Controller (CTC). A Java policy file entry is installed that grants java.security.AllPermission to any http URL containing "fs/LAUNCHER.jar", enabling remote attackers to execute arbitrary...

CVE-2005-2279

Cisco ONS 15216 Optical Add/Drop Multiplexer OADM running firmware 2.2.2 and earlier allows remote attackers to cause a denial of service management plane session loss via crafted telnet data...

CVE-2005-2279

CVE-2005-2279 affects Cisco ONS 15216 Optical Add/Drop Multiplexer (OADM) running firmware 2.2.2 and earlier. The issue allows remote attackers to cause a denial of service by sending crafted Telnet data, resulting in management plane session loss. Exploitation details are not provided in the con...

CVE-2005-2279

Cisco ONS 15216 Optical Add/Drop Multiplexer OADM running firmware 2.2.2 and earlier allows remote attackers to cause a denial of service management plane session loss via crafted telnet data...

Cisco Security Advisory: Cisco ONS 15216 OADM Telnet Denial-of-Service Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco ONS 15216 OADM Telnet Denial-of-Service Vulnerability Document ID: 65541 Revision 1.0 For Public Release 2005 July 13 1500 UTC GMT - -------------------------------------------------------------------------- Contents...

Cisco ONS telnet service DoS

Sending a specially crafted stream of data to a telnet session can cause the session to lock up...

Cisco ONS 15216 OADM Telnet Denial-of-Service Vulnerability

...

clevercopyXSS.txt

Clevercopy is an open source content management system with the core engine available for free and some add-ons available for purchase. Its website is at http://clevercopy.bestdirectbuy.com/ Clevercopy suffers from a Cross Site scripting XSS vulnerability;...

CVE-2004-1433

Multiple versions of Cisco ONS 15327, ONS 15454, and ONS 15454 SDH, including 4.60 and 4.61, 4.5x, 4.10 to 4.13, 4.00 to 4.02, and earlier versions, and ONS 15600 1.xx, allows remote attackers to cause a denial of service control card reset via malformed 1 TCP and 2 UDP packets...

CVE-2004-1433

The CVE-2004-1433 entry concerns multiple Cisco ONS platforms (ONS 15327, ONS 15454, ONS 15454 SDH across versions 4.6(0-1), 4.5.x, 4.1(0-3), 4.0(0-2), older, and ONS 15600 1.x). The issue allows remote attackers to cause a denial of service (control card reset) by sending malformed (1) TCP and (...

CVE-2004-1436

The Transaction Language 1 TL1 login interface in Cisco ONS 15327 4.60 and 4.61 and 15454 and 15454 SDH 4.60 and 4.61, when a user account is configured with a blank password, allows remote attackers to gain unauthorized access by logging in with a password larger than 10 characters...

CVE-2004-1434

CVE-2004-1434 affects Cisco ONS platforms: 15327, 15454, and 15454 SDH, across multiple software lines (4.1(0)–4.1(2), 4.5(x), 4.0(0)–4.0(2) and earlier). The issue allows remote attackers to cause a denial of service via malformed SNMP packets, triggering a control card reset. No exploitation de...

CVE-2004-1435

Multiple versions of Cisco ONS 15327, ONS 15454, and ONS 15454 SDH, including 4.60 and 4.61, 4.5x, 4.10 to 4.13, 4.00 to 4.02, and earlier versions, allows remote attackers to cause a denial of service control card reset via a large number of TCP connections with an invalid response instead of th...

CVE-2004-1434

Multiple versions of Cisco ONS 15327, ONS 15454, and ONS 15454 SDH, including 4.10 to 4.12, 4.5x, 4.00 to 4.02, and earlier versions, allows remote attackers to cause a denial of service control card reset via malformed SNMP packets...

CVE-2004-1432

CVE-2004-1432 applies to Cisco ONS platforms: ONS 15327, ONS 15454, and ONS 15454 SDH across multiple releases (e.g., 4.6(0)/4.6(1), 4.5.x, 4.1(0)–4.1(3), 4.0(0)–4.0(2) and earlier). The issue allows remote attackers to cause a denial of service (control card reset) by sending malformed IP or ICM...

CVE-2004-1435

CVE-2004-1435 affects Cisco ONS platforms (ONS 15327, ONS 15454, and ONS 15454 SDH) across multiple firmware versions (e.g., 4.6(0)/4.6(1), 4.5.x, 4.1.x, 4.0.x and earlier). The issue enables remote attackers to trigger a denial-of-service (control card reset) by opening a large number of TCP con...

CVE-2004-1432

Multiple versions of Cisco ONS 15327, ONS 15454, and ONS 15454 SDH, including 4.60 and 4.61, 4.5x, 4.10 to 4.13, 4.00 to 4.02, and earlier versions, allows remote attackers to cause a denial of service control card reset via malformed 1 IP or 2 ICMP packets...

CVE-2004-1436

The CVE-2004-1436 issue affects Cisco ONS TL1 login interfaces on Cisco ONS 15327 (4.6(0)/4.6(1)) and 15454/15454 SDH (4.6(0)/4.6(1)). It allows remote authenticated access by logging in with a password longer than 10 characters when the account password is blank, enabling unauthorized access. Th...

Cisco ONS Multiple Remote Vulnerabilities (20040219-ONS)

According to its version number, the remote Cisco ONS platform has the following vulnerabilities : - The TFTP server allows unauthenticated access to TFTP GET and PUT commands. An attacker may exploit this flaw to upload or retrieve the system files of the remote ONS platform. - A denial of servi...

Cisco ONS Multiple Remote Vulnerabilities (20040721-ons)

The remote Cisco ONS platform contains various vulnerabilities that may allow a remote attacker to cause a denial of service in the remote control cards or to bypass authentication on the remote device. C Tenable Network Security, Inc. These vulnerabilities are documented as the following Cisco b...