cisco.help

Hello! We came across a curious behavior on a number of Cisco routers, tied to the way the on-line help system presents options. It seems that, even though a regular non-"enabled" user should not be able to see the access- lists or other security-related information in the router, one can do just...

Possible issue with Cisco on-line help?

Hello! We came across a curious behavior on a number of Cisco routers, tied to the way the on-line help system presents options. It seems that, even though a regular non-"enabled" user should not be able to see the access- lists or other security-related information in the router, one can do just...

CVE-2000-0345

The on-line help system options in Cisco routers allows non-privileged users without "enabled" access to obtain sensitive information via the show command...

CVE-1999-0889

CVE-1999-0889 affects Cisco 675 routers running CBOS. The issue allows remote attackers to establish Telnet sessions if an exec or superuser password has not been set. This is documented across multiple sources (Cisco/Red Hat/NVD) as a remote-authentication bypass on these devices. The connected ...

CVE-1999-0193

CVE-1999-0193 affects Ascend and 3Com routers. The vulnerability causes a denial of service by rebooting devices when a zero-length TCP option is sent. The connected documents confirm the DoS impact and list affected hardware as Ascend and 3Com routers, with no explicit patch version or fix detai...

CVE-1999-0193

Denial of service in Ascend and 3com routers, which can be rebooted by sending a zero length TCP option...

CVE-1999-0843

CVE-1999-0843 describes a denial-of-service in Cisco routers performing NAT. The vulnerability can be triggered by an FTP client issuing a PORT command directed at a Telnet port, causing the device to basicly become unavailable (DoS). Connected sources identify Cisco routers with NAT as affected ...

CVE-1999-0843

Denial of service in Cisco routers running NAT via a PORT command from an FTP client to a Telnet port...

CVE-1999-0775

Cisco Gigabit Switch routers running IOS allow remote attackers to forward unauthorized packets due to improper handling of the "established" keyword in an access list...

CVE-1999-0843

Denial of service in Cisco routers running NAT via a PORT command from an FTP client to a Telnet port...

PT-1999-1396 · Cisco · Cisco Routers

Name of the Vulnerable Software and Affected Versions: Cisco routers affected versions not specified Description: The issue is related to a denial of service in Cisco routers running NAT. This can be triggered by a PORT command from an FTP client to a Telnet port. Recommendations: At the moment,...

CVE-1999-0445

In Cisco routers under some versions of IOS 12.0 running NAT, some packets may not be filtered by input access list filters...

CVE-1999-0230

Buffer overflow in Cisco 7xx routers through the telnet service...

CVE-1999-0221

Denial of service of Ascend routers through port 150 remote administration...

CVE-1999-0060

CVE-1999-0060 affects Ascend MAX and Pipeline routers. A malformed UDP/packet to the discard port (used by the Java Configurator tool) can trigger a denial-of-service, with observed impact described as router crashes/reboots and degraded availability. The issue is documented across multiple sourc...

CVE-1999-0060

Attackers can cause a denial of service in Ascend MAX and Pipeline routers with a malformed packet to the discard port, which is used by the Java Configurator tool...

CVE-1999-0230

The CVE-1999-0230 entry describes a buffer overflow in Cisco 7xx routers via the Telnet service. Multiple connected sources confirm the issue exists and point to the same vulnerability description: a memory overflow in the Telnet handling code of Cisco 7xx devices. The Red Hat CVE page and other ...

CVE-1999-0221

CVE-1999-0221 concerns Denial of Service against Ascend routers via remote admin port 150. Connected sources confirm the issue affects Ascend routers and is triggered through port 150, with the Red Hat advisory repeating the DoS description. The PT-1999-1015 entry reiterates the vulnerability nam...

cisco.packet.leakage.txt

Date: Tue, 13 Apr 1999 14:57:11 -0000 From: [email protected] To: [email protected] Subject: Cisco security notice: Input Access List Leakage with NAT -----BEGIN PGP SIGNED MESSAGE----- Cisco IOSR Software Input Access List Leakage with NAT Revision 1.2 For release Tuesday, April 13, 1999, 08:00...

linux.tos.field.high.priority.patch

This patch sets the tos field for IP headers to high priority and optimizes the IP connection for throughput, which has real effects on cisco routers. Since it is bad policy and if hundrets of lamers use it I wont like it. But I even more dislike hidden information, I'll let you decide wether to...