530 matches found
CVE-2004-1433
Multiple versions of Cisco ONS 15327, ONS 15454, and ONS 15454 SDH, including 4.60 and 4.61, 4.5x, 4.10 to 4.13, 4.00 to 4.02, and earlier versions, and ONS 15600 1.xx, allows remote attackers to cause a denial of service control card reset via malformed 1 TCP and 2 UDP packets...
CVE-2004-1432
Multiple versions of Cisco ONS 15327, ONS 15454, and ONS 15454 SDH, including 4.60 and 4.61, 4.5x, 4.10 to 4.13, 4.00 to 4.02, and earlier versions, allows remote attackers to cause a denial of service control card reset via malformed 1 IP or 2 ICMP packets...
CVE-2004-1436
The Transaction Language 1 TL1 login interface in Cisco ONS 15327 4.60 and 4.61 and 15454 and 15454 SDH 4.60 and 4.61, when a user account is configured with a blank password, allows remote attackers to gain unauthorized access by logging in with a password larger than 10 characters...
CVE-2004-1435
Multiple versions of Cisco ONS 15327, ONS 15454, and ONS 15454 SDH, including 4.60 and 4.61, 4.5x, 4.10 to 4.13, 4.00 to 4.02, and earlier versions, allows remote attackers to cause a denial of service control card reset via a large number of TCP connections with an invalid response instead of th...
CVE-2004-1434
Multiple versions of Cisco ONS 15327, ONS 15454, and ONS 15454 SDH, including 4.10 to 4.12, 4.5x, 4.00 to 4.02, and earlier versions, allows remote attackers to cause a denial of service control card reset via malformed SNMP packets...
CVE-2004-0308
Unknown vulnerability in Cisco ONS 15327 before 4.13, ONS 15454 before 4.61, ONS 15454 SD before 4.13, and Cisco ONS15600 before 1.30 allows a superuser whose account is locked out, disabled, or suspended to gain unauthorized access via a Telnet connection to the VxWorks shell...
CVE-2004-0307
Cisco ONS 15327 before 4.13, ONS 15454 before 4.61, and ONS 15454 SD before 4.13 allows remote attackers to cause a denial of service reset by not sending the ACK portion of the TCP three-way handshake and sending an invalid response instead...
CVE-2004-0306
Cisco ONS 15327 before 4.13, ONS 15454 before 4.61, ONS 15454 SD before 4.13, and Cisco ONS 15600 before 1.30 enable TFTP service on UDP port 69 by default, which allows remote attackers to GET or PUT ONS system files on the current active TCC in the /flash0 or /flash1 directories...
CVE-2004-0306
Cisco ONS 15327 before 4.13, ONS 15454 before 4.61, ONS 15454 SD before 4.13, and Cisco ONS 15600 before 1.30 enable TFTP service on UDP port 69 by default, which allows remote attackers to GET or PUT ONS system files on the current active TCC in the /flash0 or /flash1 directories...
CVE-2004-0307
Cisco ONS 15327 before 4.13, ONS 15454 before 4.61, and ONS 15454 SD before 4.13 allows remote attackers to cause a denial of service reset by not sending the ACK portion of the TCP three-way handshake and sending an invalid response instead...
CVE-2004-0307
CVE-2004-0307 affects Cisco ONS platforms (ONS 15327 before 4.1(3); ONS 15454 before 4.6(1); ONS 15454 SD before 4.1(3)). The vulnerability allows remote attackers to trigger a denial-of-service (reset) by manipulating the TCP three-way handshake: not sending the ACK and replying with an invalid ...
CVE-2004-0306
CVE-2004-0306 affects several Cisco ONS platforms (ONS 15327 prior to 4.1(3); ONS 15454 prior to 4.6(1); ONS 15454 SD prior to 4.1(3); Cisco ONS 15600 prior to 1.3(0)) where TFTP is enabled on UDP port 69 by default. This allows remote attackers to GET or PUT ONS system files on the current activ...
Multiple Cisco ONS control cards fail to properly handle malformed UDP packets
Overview A vulnerability exists in multiple control cards used by Cisco ONS devices. This vulnerability could allow a remote attacker to cause a denial-of-service condition. Description Cisco's Optical Networking product line consists of a series of devices designed to offer high-bandwidth data...
Cisco Transaction Language 1 (TL1) interface fails to properly validate accounts with blank passwords
Overview There is a vulnerability in the Cisco Transaction Language 1 TL1 login interface that could allow a remote attacker to gain access to a Cisco ONS device. Description Transaction Language 1 TL1 is a widely used telecommunications management protocol. A default account, CISCO15, contains a...
Multiple Cisco ONS control cards fail to properly handle malformed IP packets
Overview A vulnerability exists in multiple control cards used by Cisco ONS devices. This vulnerability could allow a remote attacker to cause a denial-of-service condition. Description Cisco's Optical Networking product line consists of a series of devices designed to offer high-bandwidth data...
Multiple Cisco ONS control cards fail to properly handle invalid TCP responses
Overview A vulnerability exists in multiple control cards used by Cisco ONS devices. This vulnerability could allow a remote attacker to cause a denial-of-service condition. Description Cisco's Optical Networking product line consists of a series of devices designed to offer high-bandwidth data...
Multiple Cisco ONS control cards fail to properly handle malformed SNMP packets
Overview A vulnerability exists in multiple control cards used by Cisco ONS devices. This vulnerability could allow a remote attacker to cause a denial-of-service condition. Description Cisco's Optical Networking product line consists of a series of devices designed to offer high-bandwidth data...
Multiple Cisco ONS control cards fail to properly handle malformed ICMP packets
Overview A vulnerability exists in multiple control cards used by Cisco ONS devices. This vulnerability could allow a remote attacker to cause a denial-of-service condition. Description Cisco's Optical Networking product line consists of a series of devices designed to offer high-bandwidth data...
