CVE-2013-1182

The CVE-2013-1182 issue affects Cisco UCS: the login page of the UCS Manager Web Console allows remote LDAP authentication bypass via a malformed request in versions prior to 1.0(2h), 1.1 prior to 1.1(1j), and 1.3(x). Root cause is an LDAP authentication bypass in the Web Console login flow. Impa...

CVE-2013-1185

CVE-2013-1185 affects Cisco UCS Manager web interface (UCS Manager) in Cisco UCS 1.x–2.x, prior to 2.0(2m). The vulnerability enables remote attackers to read sensitive data by accessing the web interface and retrieving either a technical-support bundle file or an on-device configuration backup (...

CVE-2013-1183

CVE-2013-1183 : Cisco UCS Manager IPMI functionality is affected by a buffer overflow in the IPMI component. Impacted are Cisco UCS 1.0 and 1.1 prior to 1.1(1j) and 1.2 prior to 1.2(1b). An external attacker could trigger arbitrary code execution by sending malformed data in a UDP packet. Root ca...

CVE-2013-1186

CVE-2013-1186 concerns Cisco UCS: versions 1.x before 1.4(4) and 2.x before 2.0(2m) are affected by a KVM authentication bypass via a crafted IMC authentication request. The issue is part of a Cisco UCS multi-vulnerability set; other CVEs (1182–1185) accompany it. Affected component is the Cisco ...

CVE-2013-1183

Buffer overflow in the Intelligent Platform Management Interface IPMI functionality in the Manager component in Cisco Unified Computing System UCS 1.0 and 1.1 before 1.11j and 1.2 before 1.21b allows remote attackers to execute arbitrary code via malformed data in a UDP packet, aka Bug ID...

Multiple Vulnerabilities in Cisco Unified Computing System

Managed and standalone Cisco Unified Computing System UCS deployments contain one or more of the vulnerabilities: Cisco Unified Computing System LDAP User Authentication Bypass Vulnerability Cisco Unified Computing System IPMI Buffer Overflow Vulnerability Cisco Unified Computing Management API...

Memory corruption

The Fabric Interconnect component in Cisco Unified Computing System UCS 2.0 allows remote attackers to cause a denial of service process crash via an attempted SSH session, aka Bug ID CSCtt94543...

CVE-2012-1339

The Fabric Interconnect component in Cisco Unified Computing System UCS 2.0 allows remote attackers to cause a denial of service process crash via an attempted SSH session, aka Bug ID CSCtt94543...

CVE-2012-1339

The Cisco UCS Fabric Interconnect component (UCS 2.0) is affected by CVE-2012-1339 (Bug ID CSCtt94543). An unauthenticated, remote attacker can cause a denial of service by sending a crafted SSH session; the issue stems from improper handling of user-supplied SSH requests, potentially terminating...

CVE-2012-1365

Cisco Unified Computing System UCS 1.4 and 2.0 allows remote authenticated users to cause a denial of service device reload via a malformed SNMP request to a Fabric Interconnect FI device, aka Bug ID CSCts32463...

CVE-2012-1364

Cisco Unified Computing System UCS 1.4 and 2.0 allows remote authenticated users to cause a denial of service device reload via a malformed SNMP request to a Fabric Interconnect FI device, aka Bug ID CSCts32452...

Cross site request forgery (csrf)

Cisco Unified Computing System UCS 1.4 and 2.0 allows remote authenticated users to cause a denial of service device reload via a malformed SNMP request to a Fabric Interconnect FI device, aka Bug ID CSCts32452...

CVE-2012-1365

Cisco Unified Computing System UCS 1.4 and 2.0 allows remote authenticated users to cause a denial of service device reload via a malformed SNMP request to a Fabric Interconnect FI device, aka Bug ID CSCts32463...

CVE-2012-1365

CVE-2012-1365 affects Cisco UCS (UCS) 1.4 and 2.0, where remote authenticated users can trigger a denial-of-service (device reload) by sending a malformed SNMP request to a Fabric Interconnect (FI). Root cause relates to SNMP message processing; the issue is tied to Bug ID CSCts32463. Cisco’s adv...

CVE-2012-1364

Cisco UCS Fabric Interconnect SNMP processing vulnerability (CVE-2012-1364) affects Cisco UCS 1.4 and 2.0. An authenticated, remote attacker can trigger a DoS (device reload) by sending malformed SNMP requests to the FI device. Root cause relates to errors in SNMP message processing. Cisco adviso...

CVE-2012-1364

Cisco Unified Computing System UCS 1.4 and 2.0 allows remote authenticated users to cause a denial of service device reload via a malformed SNMP request to a Fabric Interconnect FI device, aka Bug ID CSCts32452...

[CVE-2011-2569] Cisco Nexus OS (NX-OS) - Command "injection" / sanitization issues.

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Cisco Nexus OS NX-OS - Command "injection" / sanitization issues. +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Discovery by: 1 Peter Adkins [email protected] Access: 1 Local;...

Cisco Nexus OS (NX-OS) Command Injection

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Cisco Nexus OS NX-OS - Command "injection" / sanitization issues. +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Discovery by: 1 Peter Adkins Access: 1 Local; authenticated access is...

Univention Corporate Server (UCS) and Management Console Detection

This script attempts to determine if the target is a Univention Corporate Server UCS. It also tries to detect the Univention Management Console. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective rig...

CVE-2010-1666

Buffer overflow in Dan Pascu python-cjson 1.0.5, when UCS-4 encoding is enabled, allows context-dependent attackers to cause a denial of service application crash or possibly have unspecified other impact via vectors involving crafted Unicode input to the cjson.encode function...