EUVD-2014-2180

Malware in sbrugna...

EUVD-2014-2179

Malware in sbrugna...

Code injection

Cisco ONS 15454 controller cards with software 9.6 and earlier allow remote attackers to cause a denial of service flash write outage via a TCP FIN attack that triggers file-descriptor exhaustion, aka Bug ID CSCug97315...

Privilege escalation

Cisco ONS 15454 controller cards with software 9.6 and earlier allow remote attackers to cause a denial of service card reset via a TCP FIN attack that triggers file-descriptor exhaustion and a failure to open a CAL pipe, aka Bug ID CSCug97348...

CVE-2014-2139

Cisco CVE-2014-2139 affects Cisco ONS 15454 Controller Cards running software 9.6 and earlier. The flaw allows an unauthenticated, remote attacker to trigger a FIN attack that exhausts file descriptors, preventing access to flash memory and causing a denial of service. The root cause is exhaustio...

CVE-2014-2140

Cisco ONS 15454 Controller Cards (software 9.6 and earlier) are affected by CVE-2014-2140. A remote attacker can trigger a FIN attack that exhausts file descriptors, preventing opening a CAL pipe and causing a card reset (DoS) per Bug CSCug97348. Cisco advisory Cisco-SA-20140408-CVE-2014-2140 not...

CVE-2014-2140: Undefined Security Weakness

Cisco ONS 15454 controller cards with software 9.6 and earlier allow remote attackers to cause a denial of service card reset via a TCP FIN attack that triggers file-descriptor exhaustion and a failure to open a CAL pipe, aka Bug ID CSCug97348...

PT-2014-4505

Name of the Vulnerable Software and Affected Versions Cisco ONS 15454 controller cards versions 9.6 and earlier Description The issue allows remote attackers to cause a denial of service, resulting in a card reset. This is achieved through a TCP FIN attack that triggers file-descriptor exhaustion...

PT-2014-4504

Name of the Vulnerable Software and Affected Versions Cisco ONS 15454 controller cards versions 9.6 and earlier Description The issue allows remote attackers to cause a denial of service, specifically a flash write outage, via a TCP FIN attack. This attack triggers file-descriptor exhaustion...

CVE-2014-2139: Undefined Security Weakness

Cisco ONS 15454 controller cards with software 9.6 and earlier allow remote attackers to cause a denial of service flash write outage via a TCP FIN attack that triggers file-descriptor exhaustion, aka Bug ID CSCug97315...