Cisco Gigabit Switch Routers (GSR) Line Card Failure ACL Bypas (CSCdp35794)

A defect in Cisco IOS Software running on all models of Gigabit Switch Routers GSRs configured with Gigabit Ethernet or Fast Ethernet cards may cause packets to be forwarded without correctly evaluating configured access control lists ACLs. In addition to circumventing the access control lists, i...

Cisco Content Service Switch performs soft reset when XML data is sent to web management interface

Overview The Cisco Content Service Switch contains a denial-of-service vulnerability that allows remote attackers to perform a soft reset on affected devices. Description The Cisco Content Service Switch CSS products include support for the session and application layers. This additional...

Cisco Content Service Switch reboots when HTTPS POST request is sent to web management interface

Overview The Cisco Content Service Switch contains a denial-of-service vulnerability that allows remote attackers to reboot affected devices. Description The Cisco Content Service Switch CSS products include support for the session and application layers. This additional functionality allows a CS...

Security Advisory: Content Service Switch HTTP Processing Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Cisco Security Advisory: Content Service Switch HTTP Processing Vulnerabilities Revision 1.0: INTERIM For Public Release 2002 May 15 18:00 GMT - ------------------------------------------------------------------------------- Please provide your feedback on this...

Cisco Content Service Switch DoS

Malfromed POST request to web managment interface can cause device to reboot...

Content Service Switch Web Management HTTP Processing Vulnerabilities

...

CVE-2002-0350

HP Procurve Switch 4000M running firmware C.08.22 and C.09.09 allows remote attackers to cause a denial of service via a port scan of the management IP address, which disables the telnet service...

CVE-2002-0350

CVE-2002-0350 affects HP Procurve Switch 4000M running firmware C.08.22 and C.09.09. The issue allows a remote attacker to trigger a denial of service by port scanning the management IP address, resulting in the telnet service being disabled. The vulnerability is described in multiple sources (NV...

Heap overflow in sudo

Heap overflow in -p switch processing...

Hewlett Packard AdvanceStack Switch Managment Authentication Bypass Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hewlett Packard AdvanceStack Switch Managment Authentication Bypass Vulnerability Type: Access Validation Error Release Date: February 8, 2002 Product / Vendor: HP AdvanceStack 10Base-T Switching Hubs combine economical 10Base-T functionality with the...

HP AdvanceStack Switch - Authentication Bypass

source: https://www.securityfocus.com/bid/4062/info HP AdvanceStack 10Base-T Switching Hubs combine 10Base-T functionality with the performance of switching. It has been reported that authentication for HP J3210A 10Base-T Switching Hubs may be bypassed by an unprivileged user who accesses one of...

HP AdvanceStack Switch - Authentication Bypass

HP AdvanceStack Switch - Authentication Bypass source: https://www.securityfocus.com/bid/4062/info HP AdvanceStack 10Base-T Switching Hubs combine 10Base-T functionality with the performance of switching. It has been reported that authentication for HP J3210A 10Base-T Switching Hubs may be bypass...

CVE-2001-0412

CVE-2001-0412 affects Cisco Content Services (CSS) switch products 11800 and earlier (Arrowpoint). The vulnerability allows a local user to gain privileges by entering debug mode, with a CVSSv2 base score of 7.2 (HIGH): local attack vector, low complexity, no authentication, andComplete impact on...

CVE-1999-1420

The CVE-1999-1420 entry concerns NBase switches NH2012, NH2012R, NH2015, and NH2048 which expose a back door password that cannot be disabled. This backdoor allows remote attackers to modify the switch configuration. The connected documents confirm affected models and the nature of the vulnerabil...

Sendmail 8.118.12 Debugger - Arbitrary Code Execution (3)

Sendmail 8.118.12 Debugger - Arbitrary Code Execution 3 source: https://www.securityfocus.com/bid/3163/info An input validation error exists in Sendmail's debugging functionality. The problem is the result of the use of signed integers in the program's tTflag function, which is responsible for...

Sendmail 8.11/8.12 Debugger - Arbitrary Code Execution (3)

source: https://www.securityfocus.com/bid/3163/info An input validation error exists in Sendmail's debugging functionality. The problem is the result of the use of signed integers in the program's tTflag function, which is responsible for processing arguments supplied from the command line with t...

CVE-2001-0566

Cisco Catalyst 2900XL switch allows a remote attacker to create a denial of service via an empty UDP packet sent to port 161 SNMP when SNMP is disabled...

CVE-2001-0566

CVE-2001-0566 affects Cisco Catalyst 2900XL switches. A remote attacker can cause a denial-of-service by sending an empty UDP packet to UDP port 161 (SNMP) when SNMP is disabled. The vulnerability is tied to handling of unsolicited SNMP traffic even with SNMP disabled, leading to partial availabi...

Cisco Content Service Switch 11000 Series Web Management Vulnerability

...

Cisco IOS HTTP Server ?/ String Local DoS

It was possible to make the remote switch reboot by requesting : GET /cgi-bin/view-source?/ A remote attacker may use this flaw to prevent your network from working properly. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...