.:[ packet storm ]:.
                           
four continents, one idea
four continents, one idea

 Section:  .. / advisories / cisco  /

Page 1 of 2
<< 1 2 >> Files 1 - 25 of 37
Currently sorted by: File SizeSort By: File Name, Last Modified

 ///  File Name: cisco.ssh.advisory.txt
Description:
Cisco Security Advisory - Exploitation of the CRC 32 overflow can cause some Cisco devices to reboot. This vulnerability affects all devices running Cisco IOS Software supporting SSH, Cisco Catalyst 6000 switches running CatOS, Cisco PIX Firewall's and the Cisco 11000 Content Service Switch family.
Homepage:http://www.cisco.com
File Size:29921
Last Modified:Jul 3 08:29:26 2002
MD5 Checksum:992e4b18bd52d919e0beb5718654e265

 ///  File Name: ios-snmp-community-vulns-pub.txt
Description:
Cisco Security Advisory - Many IOS and CatOS releases contain several independent but related vulnerabilities involving the unexpected creation and exposure of SNMP community strings. These vulnerabilities can be exploited to permit the unauthorized viewing or modification of affected devices. To fix, install the free upgrade or block UDP port 161.
Homepage:http://www.cisco.com
File Size:29584
Last Modified:Mar 2 22:30:53 2001
MD5 Checksum:d4e9d6200eee994707a7fb10f80484c3

 ///  File Name: cisco.00-05-14.http
Description:
A defect in multiple releases of Cisco IOS software will cause a Cisco router or switch to halt and reload if the IOS HTTP service is enabled and browsing to "http:///%%" is attempted. This defect can be exploited to produce a denial of service (DoS) attack. This defect has been discussed on public mailing lists and should be considered public information.
Homepage:http://www.cisco.com/warp/public/707/ioshttpserver-pub.shtml
File Size:29196
Last Modified:May 17 22:44:07 2000
MD5 Checksum:177d2675ccf94d2117289316882510d8

 ///  File Name: cisco.98-09-11.pix_cbac_frag
Description:
Cisco PIX and CBAC Fragmentation Attack
File Size:26914
Last Modified:Sep 23 05:48:10 1999
MD5 Checksum:c3d2ebbf070779efc6b7db27791ca234

 ///  File Name: cisco.99-01-11.ios_crash
Description:
cisco.99-01-11.ios_crash
File Size:26202
Last Modified:Sep 23 05:48:10 1999
MD5 Checksum:9b487478f949e76271087ba2247f40dc

 ///  File Name: cisco.98-11-05.access_list_leak
Description:
Cisco IOS DFS Access List Leakage
File Size:26018
Last Modified:Sep 23 05:48:10 1999
MD5 Checksum:bcf0867cb4f25bced43607c4f97cd7ef

 ///  File Name: cisco.99-04-13.input_access_list
Description:
Cisco IOS(R) Software Input Access List Leakage with NAT
File Size:25823
Last Modified:Sep 23 05:48:10 1999
MD5 Checksum:385df517d29bb1a8feeb36f94598a3c3

 ///  File Name: cisco.01-11-14.12xxx.ACL
Description:
Cisco Security Advisory - Six vulnerabilities involving ACLs have been discovered in multiple releases of Cisco IOSR Software Release for Cisco 12000 Series Internet Routers.
Homepage:http://www.cisco.com
File Size:19564
Last Modified:Nov 15 07:47:27 2001
MD5 Checksum:680b74148f9c721169d492e5e6d90534

 ///  File Name: cisco.00-04-20.telnet
Description:
Cisco Security Advisory: Cisco IOS Software TELNET Option Handling Vulnerability. A defect in multiple Cisco IOS software versions will cause a Cisco router to reload unexpectedly when the router is tested for security vulnerabilities by security scanning software programs. The defect can be exploited repeatedly to produce a consistent denial of service (DoS) attack. Vulnerable releases include 11.3AA, 12.0(2) up to and including 12.0(6), and 12.0(7).
File Size:17594
Last Modified:Apr 23 11:48:01 2000
MD5 Checksum:27305612e78c4c70907ce2f5433761ed

 ///  File Name: cisco.01-11-14.12xxx.icmp
Description:
Cisco Security Advisory - A vulnerability causing performance degradation on Cisco 12000 series routers when receiving large numbers of ICMP Unreachable packets has been discovered.
Homepage:http://www.cisco.com
File Size:17004
Last Modified:Nov 15 07:52:33 2001
MD5 Checksum:9d945b095955cb7d2951b1f559648487

 ///  File Name: cisco.98-10-14.ios_command_history
Description:
cisco.98-10-14.ios_command_history
File Size:16898
Last Modified:Sep 23 05:48:10 1999
MD5 Checksum:155476f384d623fdfb1c0a527f787fb2

 ///  File Name: cisco.pix-ftp.txt
Description:
The Cisco Secure PIX Firewall interprets FTP (File Transfer Protocol) commands out of context and inappropriately opens temporary access through the firewall. This is an interim notice describing two related vulnerabilities.
Homepage:http://www.cisco.com
File Size:15068
Last Modified:Mar 20 22:04:00 2000
MD5 Checksum:de9c219fb628efe10d5cdecd1afde90a

 ///  File Name: cisco.00-09-21.ciscosecure_acs
Description:
Cisco Security Advisory - This advisory highlights three vulnerabilities found in the CiscoSecure Access Control Server for Windows NT. The first bug is a buffer overflow in the CSAdmin module that allows a malicious user to execute arbitrary code or crash the module by sending an oversized packet to TCP port 2002. The second vulnerability involves sending an oversized TACACS+ packet to the CiscoSecure ACS thereby creating an unstable condition within the system conducive to denial of service attacks. Lastly, the enable password can be bypassed to gain unauthorized access to a router or switch if the interaction is between an LDAP server that allows null passwords and a CiscoSecure ACS for Windows NT. All releases of CiscoSecure ACS for Windows NT Server up to and including 2.1(x), 2.3(3), and 2.4(2) are vulnerable. CiscoSecure ACS for UNIX is not affected.
Homepage:http://www.cisco.com
File Size:14817
Last Modified:Sep 22 21:59:09 2000
MD5 Checksum:f911feded42207577565c591a9f00715

 ///  File Name: cisco.99-03-11.7xx_tcp_http
Description:
cisco.99-03-11.7xx_tcp_http
File Size:12535
Last Modified:Sep 23 05:48:10 1999
MD5 Checksum:5fc4770b21cc75ceb781c269c8ac4c01

 ///  File Name: cisco.99-03-24.sv_remote_reload
Description:
cisco.99-03-24.sv_remote_reload
File Size:12175
Last Modified:Sep 23 05:48:10 1999
MD5 Checksum:eb6841dc82bc52406ffb9638374b03ac

 ///  File Name: cisco.00-08-03.gigabit
Description:
Cisco Security Advisory - A defect in Cisco IOS Software running on all models of Gigabit Switch Routers (GSRs) configured with Gigabit Ethernet or Fast Ethernet cards may cause packets to be forwarded without correctly evaluating configured access control lists (ACLs). In addition to circumventing the access control lists, it is possible to stop an interface from forwarding any packets, thus causing a denial of service. There is no workaround - Customers are urged to upgrade to unaffected versions of software as soon as possible.
Homepage:http://www.cisco.com
File Size:11939
Last Modified:Aug 4 02:40:01 2000
MD5 Checksum:27ef81cd0e03f8f503abba3d498f04ef

 ///  File Name: cisco.00-07-11.tcpreset
Description:
Cisco Secure PIX Firewall TCP Reset Vulnerability - The Cisco Secure PIX Firewall cannot distinguish between a forged TCP Reset (RST) packet and a genuine TCP RST packet because the sequence number is not checked. Any TCP/IP connection established through the Cisco Secure PIX Firewall can be terminated by a third party from the untrusted network if the connection can be uniquely determined. If only source ip / destination ip / destination port are known, a RST packet can be sent with each source port.
Homepage:http://www.cisco.com/warp/public/707/sec_incident_response.shtml
File Size:11676
Last Modified:Jul 22 08:39:50 2000
MD5 Checksum:0d51fab0034e2a9fac7169070d05a8a2

 ///  File Name: cisco-ip-telephone.txt
Description:
Cisco Security Advisory - Multiple Vulnerabilities in Cisco IP Telephones. Bugs found in the Cisco IP Telephones can result in denial of service conditions and allow unauthorized access to the configuration settings of the Cisco IP Phone models 7910, 7940, and 7960.
Homepage:http://www.cisco.com/warp/public/707/advisory.html
File Size:11592
Last Modified:May 24 09:42:30 2002
MD5 Checksum:5be4f91e288a97ccb48243948ce0260c

 ///  File Name: cisco.99-12-15.cache
Description:
Cisco Advisory - Cisco Cache Engine Authentication Vulnerabilities. A vulnerability exists that could allow an unauthorized person to substitute arbitrary material in place of legitimate content for a specified website. This arbitrary content would be viewable only by users of the affected (or "polluted") Cache Engine. A second vulnerability exists that could allow unauthorized persons to view performance information via the web interface of the Cache Engine. A third vulnerability existed that allowed a null username and password pair to be accepted as valid authentication credentials.
File Size:11471
Last Modified:Dec 17 02:25:12 1999
MD5 Checksum:9075f846ea075d9a186e5105fad23052

 ///  File Name: cisco-vpn-client.txt
Description:
Cisco Security Advisory - A buffer overflow in the Cisco VPN Clients for Linux, Solaris, and Mac OS X platforms can be exploited locally to gain local root access. This is fixed in v3.5.2.
Homepage:http://www.cisco.com
File Size:10689
Last Modified:Jun 20 10:00:30 2002
MD5 Checksum:a62ed0a23d87903525d301700049ea09

 ///  File Name: transparentcache-tcp-relay-vuln-pub..>
Description:
Cisco Security Advisory - Cisco Cache Engines and Content Engines provide a transparent cache for world wide web pages retrieved via HTTP. The default configuration of the proxy feature can be abused to open a TCP connection to any reachable destination IP address and hide the true IP source address of the connection allowing for anonymous port scanning, dos attacks, spam, etc.
Homepage:http://www.cisco.com
File Size:10330
Last Modified:May 19 08:55:55 2002
MD5 Checksum:d7f5a2dacc30f1f3432c87d240e4cc7f

 ///  File Name: cisco-sa-20031202-SNMP-trap.txt
Description:
Cisco Security Advisory 20031202 - Cisco Aironet Access Points (AP) running Cisco IOS software will send any static Wired Equivalent Privacy (WEP) key in the cleartext to the Simple Network Management Protocol (SNMP) server if the snmp-server enable traps wlan-wep command is enabled. Cisco Aironet 1100, 1200, and 1400 series are affected, but the command is disabled by default.
Homepage:http://www.cisco.com/security
File Size:9606
Last Modified:Dec 3 04:43:00 2003
MD5 Checksum:65518f0742d4bd46b464f831a968adf3

 ///  File Name: cisco-cbos-dos.txt
Description:
Cisco Security Advisory - Three new denial of service vulnerabilities involving large packets have been found in Cisco routers that are running the CBOS software. This affects the following Cisco devices: 605, 626, 627, 633, 673, 675, 675e, 676, 677, 677i and 678.
Homepage:http://www.cisco.com/warp/public/707/advisory.html
File Size:9033
Last Modified:May 25 19:52:04 2002
MD5 Checksum:e15833ccbf8a5ab9f5a58121cdd65b31

 ///  File Name: cisco.99-08-19.acs
Description:
cisco.99-08-19.acs
File Size:9008
Last Modified:Sep 23 05:48:10 1999
MD5 Checksum:b6e1e092db3ed20d45647bbf0fba19cc

 ///  File Name: css-http-post-pub.txt
Description:
Cisco Security Advisory - The Cisco Content Service Switch (CSS) 11000 series switches are susceptible to a denial of service attack caused by a soft reset due to improper handling of HTTP POST requests to the web management interface.
Homepage:http://www.cisco.com
File Size:8962
Last Modified:May 19 08:57:17 2002
MD5 Checksum:c5528c55d4552fbdeb5192f1a05a8c64