Cisco TC Software SIP Implementation Vulnerability

A vulnerability in the Session Initiation Protocol SIP implementation used in TC Software could allow an unauthenticated, remoteattacker to cause an endpoint to process unintended SIP NOTIFY messages. The vulnerability is due to errors in the SIP implementation. An attacker could exploit this...

CVE-2013-3379

The firewall subsystem in Cisco TelePresence TC Software before 4.2 does not properly implement rules that grant access to hosts, which allows remote attackers to obtain shell access with root privileges by leveraging connectivity to the management network, aka Bug ID CSCts37781...

CVE-2013-3377

Cisco TelePresence TC Software before 5.1.7 and TE Software before 4.1.3 allow remote attackers to cause a denial of service device reload via crafted SIP packets, aka Bug ID CSCue01743...

CVE-2013-3379

The firewall subsystem in Cisco TelePresence TC Software before 4.2 does not properly implement rules that grant access to hosts, which allows remote attackers to obtain shell access with root privileges by leveraging connectivity to the management network, aka Bug ID CSCts37781...

CVE-2013-3377

CVE-2013-3377 affects Cisco TelePresence TC Software prior to 5.1.7 and TE Software prior to 4.1.3. The vulnerability allows remote attackers to cause a DoS (device reload) by sending crafted SIP packets (Bug ID CSCue01743). Cisco’s advisory (cisco-sa-20130619-tpc) confirms two SIP-related DoS vu...

CVE-2013-3379

CVE-2013-3379 affects Cisco TelePresence TC Software prior to 4.2, where the firewall subsystem inadequately enforces host-access rules. This can let an attacker on the management network obtain a root shell on the affected system by leveraging adjacent access. The core issue is an adjacent-root-...

CVE-2013-3378

Cisco TelePresence TC Software before 6.1 and TE Software before 4.1.3 are affected by a denial-of-service vulnerability in SIP handling that can be triggered by specially crafted SIP packets, leading to a temporary device hang. The issue is documented as Bug CSCuf89557, with Cisco’s advisory cis...

PT-2013-4337

Name of the Vulnerable Software and Affected Versions Cisco TelePresence TC Software versions prior to 4.2 Description The issue is related to the firewall subsystem not properly implementing rules for granting access to hosts. This allows remote attackers to obtain shell access with root...

CVE-2013-3378: Improper Input Validation

Cisco TelePresence TC Software before 6.1 and TE Software before 4.1.3 allow remote attackers to cause a denial of service temporary device hang via crafted SIP packets, aka Bug ID CSCuf89557...

PT-2013-4335

Name of the Vulnerable Software and Affected Versions Cisco TelePresence TC Software versions prior to 5.1.7 Cisco TelePresence TE Software versions prior to 4.1.3 Description The issue allows remote attackers to cause a denial of service, resulting in a device reload, via crafted SIP packets...

CVE-2013-3379: Undefined Security Weakness

The firewall subsystem in Cisco TelePresence TC Software before 4.2 does not properly implement rules that grant access to hosts, which allows remote attackers to obtain shell access with root privileges by leveraging connectivity to the management network, aka Bug ID CSCts37781...

CVE-2013-3377: Undefined Security Weakness

Cisco TelePresence TC Software before 5.1.7 and TE Software before 4.1.3 allow remote attackers to cause a denial of service device reload via crafted SIP packets, aka Bug ID CSCue01743...

PT-2013-4336

Name of the Vulnerable Software and Affected Versions Cisco TelePresence TC Software versions prior to 6.1 Cisco TelePresence TE Software versions prior to 4.1.3 Description The issue allows remote attackers to cause a denial of service, resulting in a temporary device hang, via crafted SIP...

Multiple Vulnerabilities in Cisco TelePresence TC and TE Software

Cisco TelePresence TC and TE Software contain two vulnerabilities in the implementation of the Session Initiation Protocol SIP that could allow an unauthenticated remote attacker to cause a denial of service DoS condition. Additionally, Cisco TelePresence TC Software contain an adjacent root acce...

Scientific Linux Security Update : kernel on SL5.x i386/x86_64

CVE-2009-2695 kernel: SELinux and mmapminaddr CVE-2009-3228 kernel: tc: uninitialised kernel memory leak CVE-2009-3286 kernel: OEXCL creates on NFSv4 are broken CVE-2009-2908 kernel ecryptfs NULL pointer dereference CVE-2009-3613 kernel: flood ping cause out-of-iommu error and panic when mtu larg...

VMware vFabric tc Server JMX Authentication Security Bypass Vulnerability

The host is running VMware vFabric tc Server and is prone to security bypass vulnerability. OpenVAS Vulnerability Test $Id: secpodvmwarevfabrictcserversecuritybypassvuln.nasl 7052 2017-09-04 11:50:51Z teissa $ VMware vFabric tc Server JMX Authentication Security Bypass Vulnerability Authors: Soor...

VMware vFabric tc Server 2.x JMX Authentication Security Bypass Vulnerability

VMware vFabric tc Server is prone to a security bypass vulnerability. Copyright C 2011 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

CVE-2011-0527: VMware vFabric tc Server password obfuscation bypass

Severity: Important Versions Affected: 2.0.0.RELEASE to 2.0.5.SR01 2.1.0.RELEASE to 2.1.1.SR01 Description: tc Server allows users to store the passwords used for JMX authentication in an obfuscated form for organizations where storing passwords in plain text is not permitted. The JMX...

VMware vFabric tc Server weak encryption

Server accepts cleartext password even if it's not allowed for user...

CVE-2011-0527

VMware vFabric tc Server aka SpringSource tc Server 2.0.x before 2.0.6.RELEASE and 2.1.x before 2.1.2.RELEASE accepts obfuscated passwords during JMX authentication, which makes it easier for context-dependent attackers to obtain access by leveraging an ability to read stored passwords...