CVE-2011-1625

Cisco IOS 12.2, 12.3, 12.4, 15.0, and 15.1, when the data-link switching DLSw feature is configured, allows remote attackers to cause a denial of service device crash by sending a sequence of malformed packets and leveraging a "narrow timing window," aka Bug ID CSCtf74999, a different vulnerabili...

[SECURITY] Fedora 15 Update: gdm-3.0.4-1.fc15

GDM provides the graphical login screen, shown shortly after boot up, log out, and when user-switching...

Vendor's List Of Backdoor Accounts Leaked Online

An internal document listing the backdoor accounts for switches manufactured by networking equipment vendor Allied Telesis was circulating online Friday, a day after an internal support page providing instructions on accessing hard coded back door accounts in the company’s products was found to b...

[SECURITY] Fedora 13 Update: gdm-2.30.2-2.fc13

GDM provides the graphical login screen, shown shortly after boot up, log out, and when user-switching...

Code injection

Unspecified vulnerability in Cisco IOS 12.0 through 12.4, IOS XE 2.1.x through 2.3.x before 2.3.2, and IOS XR 3.2.x through 3.4.3, when Multiprotocol Label Switching MPLS and Label Distribution Protocol LDP are enabled, allows remote attackers to cause a denial of service device reload or process...

CVE-2010-0576

Unspecified vulnerability in Cisco IOS 12.0 through 12.4, IOS XE 2.1.x through 2.3.x before 2.3.2, and IOS XR 3.2.x through 3.4.3, when Multiprotocol Label Switching MPLS and Label Distribution Protocol LDP are enabled, allows remote attackers to cause a denial of service device reload or process...

SA-CONTRIB-2010-018 - Content Distribution - Multiple Vulnerabilities

Content Distribution module allows calling a method to delete particular nodes using a XML-RPC call. When this method is allowed to be called by anonymous users in user permissions, an attacker might delete a random node. In addition, certain actions require Content Distribution to temporarily...

CVE-2009-3564

puppetmasterd in puppet 0.24.6 does not reset supplementary groups when it switches to a different user, which might allow local users to access restricted files...

CVE-2009-3564

puppetmasterd in puppet 0.24.6 does not reset supplementary groups when it switches to a different user, which might allow local users to access restricted files...

Internet Explorer Cross Domain Document Switching (MS09-019; CVE-2007-3091)

Microsoft Internet Explorer is the most widely used Internet browser. An information disclosure vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to a script that can create a race condition that could break the same-origin policy of Internet Explorer and re...

Cisco Security Advisory: Cisco Global Site Selector Appliances DNS Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco Global Site Selector Appliances DNS Vulnerability Advisory ID: cisco-sa-20090107-gss http://www.cisco.com/warp/public/707/cisco-sa-20090107-gss.shtml Revision 1.0 For Public Release 2009 January 07 1600 UTC GMT -...

Design/Logic Flaw

A "logic error" in Cisco IOS 12.0 through 12.4, when a Multiprotocol Label Switching MPLS VPN with extended communities is configured, sometimes causes a corrupted route target RT to be used, which allows remote attackers to read traffic from other VPNs in opportunistic circumstances...

Cisco IOS MPLS VPN May Leak Information

Devices running Cisco IOS versions 12.0S, 12.2, 12.3 or 12.4 and configured for Multiprotocol Label Switching MPLS Virtual Private Networks VPNs or VPN Routing and Forwarding Lite VRF Lite and using Border Gateway Protocol BGP between Customer Edge CE and Provider Edge PE devices may permit...

PT-2008-5158 · Cisco · Cisco Ios

Name of the Vulnerable Software and Affected Versions: Cisco IOS versions 12.2 and 12.4 Description: The issue is related to a Denial of Service DoS attack from specially crafted packets in the Multi Protocol Label Switching MPLS Forwarding Infrastructure MFI in Cisco IOS. This can cause memory...

Cisco内容交换模块7层负载均衡拒绝服务漏洞

BUGTRAQ ID: 29216 CVECAN ID: CVE-2008-1749 Catalyst内容交换模块（CSM）是Catalyst 6500和7600系列的集成服务器负载均衡线卡，用于改善客户端通讯对端点的响应时间。 如果对CSM或CSM-S配置了7层负载均衡的话，Cisco CSM和Cisco CSM-S的某些软件版本中就会存在内存泄露漏洞。当CSM或CSM-S处理带有特制TCP标记组合的TCP段且无法确认负载均衡时，由于CSM/CSM-S后的服务器过载和/或无法接受TCP连接，可能触发内存泄露。...

Cisco Content Switching Module memory leak

Memory leak on TCP flags processing causes DoS conditions...

Cisco Security Advisory: Cisco Content Switching Module Memory Leak Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco Content Switching Module Memory Leak Vulnerability Advisory ID: cisco-sa-20080514-csm http://www.cisco.com/warp/public/707/cisco-sa-20080514-csm.shtml Revision 1.0 For Public Release 2008 May 14 1600 UTC GMT Summary...

Memory corruption

Memory leak in Cisco Content Switching Module CSM 4.23 up to 4.28 and Cisco Content Switching Module with SSL CSM-S 2.12 up to 2.17 allows remote attackers to cause a denial of service memory consumption via TCP segments with an unspecified combination of TCP flags...

CVE-2008-1749

Memory leak in Cisco Content Switching Module CSM 4.23 up to 4.28 and Cisco Content Switching Module with SSL CSM-S 2.12 up to 2.17 allows remote attackers to cause a denial of service memory consumption via TCP segments with an unspecified combination of TCP flags...

CVE-2008-1749

The CVE-2008-1749 issue affects Cisco Content Switching Module (CSM) and CSM-S when configured for layer 7 load balancing. A memory leak is triggered while processing TCP segments with a specific combination of TCP flags, causing memory consumption and potential denial of service as the servers b...