VMSA-2014-0008 : VMware vSphere product updates to third-party libraries

a. vCenter Server Apache Struts Update The Apache Struts library is updated to address a security issue. This issue may lead to remote code execution after authentication. The Common Vulnerabilities and Exposures project cve.mitre.org has assigned the identifier CVE-2014-0114 to this issue. b...

VMware Security Updates for vCenter Server (VMSA-2014-0008)

VMware has updated vSphere third party libraries. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:vmware:vcenterserver";...

VMware ESXi product updates to third party libraries (VMSA-2014-0008)

VMware has updated vSphere third party libraries. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Multiple SpringSource Products Multiple HTML Injection Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/38913/info Multiple SpringSource Products are prone to multiple HTML-injection vulnerabilities because they fail to sufficiently sanitize user-supplied data. Attacker-supplied HTML or JavaScript code could run in the...

CentOS Update for libvirt CESA-2014:0560 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Cisco TelePresence TC and TE Software Multiple Security Vulnerabilities

Cisco TelePresence TC and TE Software are prone to multiple security vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2014-2170

Cisco TelePresence TC Software 4.x and 5.x before 5.1.7 and 6.x before 6.0.1 and TE Software 4.x and 6.0 allow remote authenticated users to execute arbitrary commands by using the commands as arguments to tshell aka tcsh scripts, aka Bug ID CSCue60202...

Command injection

Cisco TelePresence TC Software 4.x and 5.x before 5.1.7 and 6.x before 6.0.1 and TE Software 4.x and 6.0 allow remote authenticated users to execute arbitrary commands by using the commands as arguments to tshell aka tcsh scripts, aka Bug ID CSCue60202...

Command injection

Cisco TelePresence TC Software 4.x through 6.x before 6.2.0 and TE Software 4.x and 6.0 allow remote authenticated users to execute arbitrary commands by using the commands as arguments to internal system scripts, aka Bug ID CSCue60211...

CVE-2014-2162

The SIP implementation in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allows remote attackers to cause a denial of service device reload via crafted SIP packets, aka Bug ID CSCud29566...

CVE-2014-2170

Cisco TelePresence TC Software 4.x and 5.x before 5.1.7 and 6.x before 6.0.1 and TE Software 4.x and 6.0 allow remote authenticated users to execute arbitrary commands by using the commands as arguments to tshell aka tcsh scripts, aka Bug ID CSCue60202...

CVE-2014-2162

CVE-2014-2162 affects Cisco TelePresence TC Software (4.x/5.x) and TE Software (4.x/6.0). The vulnerability stems from the SIP implementation, allowing remote attackers to cause a denial of service (device reload) by sending crafted SIP packets. Several connected advisories (Cisco and third‑party...

CVE-2014-2166

CVE-2014-2166 concerns Cisco TelePresence TC/TE Software 4.x where a flaw in the SIP implementation can be triggered by crafted SIP packets, causing a denial of service (device reload). The vulnerability is part of a set of SIP-related DoS issues in the Cisco TelePresence TC/TE software family (B...

CVE-2014-2165

Cisco TelePresence TC and TE Software (TC: 4.x/5.x; TE: 4.x and 6.0) are affected by multiple SIP-related DoS and code execution vulnerabilities. For CVE-2014-2165, a flaw in the SIP implementation can allow remote attackers to cause a device reload by sending crafted SIP packets. The Cisco advis...

CVE-2014-2163

CVE-2014-2163 affects Cisco TelePresence TC and TE Software (4.x and 5.x). The vulnerability lies in the SIP implementation, where crafted SIP packets can cause a denial-of-service resulting in a device reload. The issue is documented across multiple sources (Cisco advisory Cisco-SA-20140430-TCTE...

CVE-2014-2170

CVE-2014-2170 affects Cisco TelePresence TC Software 4.x/5.x (and TE Software 4.x/6.0) prior to the patched versions 5.1.7 and 6.0.1, respectively. The vulnerability is a command injection via tshell (tcsh) scripts that could allow remote authenticated users to execute arbitrary commands. The iss...

CVE-2014-2175

Cisco TelePresence TC Software 4.x/5.x and TE Software 4.x/6.0 are affected by CVE-2014-2175: a DoS via crafted H.225 packets causing memory consumption. The vulnerability is listed in Cisco’s advisory for TC/TE; updates are available to address these issues. Connected sources confirm affected ve...

CVE-2014-2173

Summary: CVE-2014-2173 affects Cisco TelePresence TC Software 4.x/5.x and TE Software 4.x/6.0, where access to the serial port is not properly restricted, enabling local users to gain privileges via unspecified commands (Bug CSCub67692). What’s affected (as stated): Cisco TelePresence TC and TE S...

CVE-2014-2169

Cisco TelePresence TC/TE Software 4.x–6.x (before 6.2.0 for TC and 6.0 for TE) is affected by CVE-2014-2169: remote authenticated users can execute arbitrary commands by passing commands as arguments to internal system scripts (CSCue60211). The vulnerability is exposed in how user-supplied input ...

Multiple Vulnerabilities in Cisco TelePresence TC and TE Software

Cisco TelePresence TC and TE Software are affected by the following vulnerabilities: Six Session Initiation Protocol SIP denial of service vulnerabilities Cisco TelePresence TC and TE Software DNS Buffer Overflow Vulnerability Cisco TelePresence TC and TE Software Input Validation Vulnerability...