Browse CVEs

HIGH 9.4 CVE-2005-4332 Cisco Clean Access 3.5.5 and earlier on the Secure Smart Manager allows remote attackers to bypass authentication and cause a denial of service or up… Network Admission Control Manager And Server System Software Mitigation only Fix from $1,9502005-12-17 HIGH 7.8 CVE-2005-4258 Unspecified Cisco Catalyst Switches allow remote attackers to cause a denial of service (device crash) via an IP packet with the same source and dest… Catalyst No fix yet Fix from $1,9502005-12-15 MEDIUM 5.4 CVE-2005-3788 Race condition in Cisco Adaptive Security Appliance (ASA) 7.0(0), 7.0(2), and 7.0(4), when running with an Active/Standby configuration and when the … Adaptive Security Appliance Software Mitigation only Fix from $1,6002005-11-24 MEDIUM 5.0 CVE-2005-3774EPSS 18% Cisco PIX 6.3 and 7.0 allows remote attackers to cause a denial of service (blocked new connections) via spoofed TCP packets that cause the PIX to cr… Pix Mitigation only Fix from $1,6002005-11-23 MEDIUM 5.0 CVE-2005-3669EPSS 5% Multiple unspecified vulnerabilities in the Internet Key Exchange version 1 (IKEv1) implementation in multiple Cisco products allow remote attackers … Firewall Services Module Mitigation only Fix from $1,6002005-11-18 HIGH 9.3 CVE-2005-3481EPSS 7% Cisco IOS 12.0 to 12.4 might allow remote attackers to execute arbitrary code via a heap-based buffer overflow in system timers. NOTE: this issue doe… iOS No fix yet Fix from $1,9502005-11-03 HIGH 7.5 CVE-2005-2841EPSS 14% Buffer overflow in Firewall Authentication Proxy for FTP and/or Telnet Sessions for Cisco IOS 12.2ZH and 12.2ZL, 12.3 and 12.3T, and 12.4 and 12.4T a… iOS Mitigation only Fix from $1,9502005-09-08 HIGH 7.5 CVE-2005-2181 Cisco 7940/7960 Voice over IP (VoIP) phones do not properly check the Call-ID, branch, and tag values in a NOTIFY message to verify a subscription, w… Ip Phone 7940 Firmware Mitigation only Fix from $1,9502005-07-11 HIGH 7.5 CVE-2005-1942 Cisco switches that support 802.1x security allow remote attackers to bypass port security and gain access to the VLAN via spoofed Cisco Discovery Pr… Catalyst Mitigation only Fix from $1,9502005-06-10 HIGH 7.5 CVE-2005-1057 Cisco IOS 12.2T, 12.3 and 12.3T, when using Easy VPN Server XAUTH version 6 authentication, allows remote attackers to bypass authentication via a "m… iOS Mitigation only Fix from $1,9502005-05-02 HIGH 7.5 CVE-2005-1058 Cisco IOS 12.2T, 12.3 and 12.3T, when processing an ISAKMP profile that specifies XAUTH authentication after Phase 1 negotiation, may not process cer… iOS Mitigation only Fix from $1,9502005-05-02 MEDIUM 5.0 CVE-2005-0186 Cisco IOS 12.1YD, 12.2T, 12.3 and 12.3T, when configured for the IOS Telephony Service (ITS), CallManager Express (CME) or Survivable Remote Site Tel… iOS No fix yet Fix from $1,6002005-01-19 MEDIUM 5.1 CVE-2004-1112 The buffer overflow trigger in Cisco Security Agent (CSA) before 4.0.3 build 728 waits five minutes for a user response before terminating the proces… Security Agent Mitigation only Fix from $1,6002005-01-10 MEDIUM 5.0 CVE-2004-1111 Cisco IOS 2.2(18)EW, 12.2(18)EWA, 12.2(14)SZ, 12.2(18)S, 12.2(18)SE, 12.2(18)SV, 12.2(18)SW, and other versions without the "no service dhcp" command… iOS Mitigation only Fix from $1,6002005-01-10 MEDIUM 5.0 CVE-2004-1163 Cisco CNS Network Registrar Central Configuration Management (CCM) server 6.0 through 6.1.1.3 allows remote attackers to cause a denial of service (C… Cns Network Registrar Mitigation only Fix from $1,6002005-01-10 MEDIUM 5.0 CVE-2004-1164 The lock manager in Cisco CNS Network Registrar 6.0 through 6.1.1.3 allows remote attackers to cause a denial of service (process crash) via a certai… Cns Network Registrar Mitigation only Fix from $1,6002005-01-10 HIGH 7.5 CVE-2004-1436 The Transaction Language 1 (TL1) login interface in Cisco ONS 15327 4.6(0) and 4.6(1) and 15454 and 15454 SDH 4.6(0) and 4.6(1), when a user account … Optical Networking Systems Software Mitigation only Fix from $1,9502004-12-31 MEDIUM 5.0 CVE-2004-1432 Multiple versions of Cisco ONS 15327, ONS 15454, and ONS 15454 SDH, including 4.6(0) and 4.6(1), 4.5(x), 4.1(0) to 4.1(3), 4.0(0) to 4.0(2), and earl… Optical Networking Systems Software Mitigation only Fix from $1,6002004-12-31 MEDIUM 5.0 CVE-2004-1433 Multiple versions of Cisco ONS 15327, ONS 15454, and ONS 15454 SDH, including 4.6(0) and 4.6(1), 4.5(x), 4.1(0) to 4.1(3), 4.0(0) to 4.0(2), and earl… Optical Networking Systems Software Mitigation only Fix from $1,6002004-12-31 MEDIUM 5.0 CVE-2004-1434 Multiple versions of Cisco ONS 15327, ONS 15454, and ONS 15454 SDH, including 4.1(0) to 4.1(2), 4.5(x), 4.0(0) to 4.0(2), and earlier versions, allow… Optical Networking Systems Software No fix yet Fix from $1,6002004-12-31 MEDIUM 5.0 CVE-2004-1435 Multiple versions of Cisco ONS 15327, ONS 15454, and ONS 15454 SDH, including 4.6(0) and 4.6(1), 4.5(x), 4.1(0) to 4.1(3), 4.0(0) to 4.0(2), and earl… Optical Networking Systems Software Mitigation only Fix from $1,6002004-12-31 HIGH 7.5 CVE-2004-0079EPSS 10% The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) vi… Firewall Services Module Mitigation only Fix from $1,9502004-11-23 MEDIUM 5.0 CVE-2004-0081EPSS 7% OpenSSL 0.9.6 before 0.9.6d does not properly handle unknown message types, which allows remote attackers to cause a denial of service (infinite loop… Firewall Services Module Mitigation only Fix from $1,6002004-11-23 MEDIUM 5.0 CVE-2004-0112EPSS 10% The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check the length of Kerberos … Firewall Services Module Mitigation only Fix from $1,6002004-11-23 MEDIUM 5.0 CVE-2004-0551 Cisco CatOS 5.x before 5.5(20) through 8.x before 8.2(2) and 8.3(2)GLX, as used in Catalyst switches, allows remote attackers to cause a denial of se… Catos Mitigation only Fix from $1,6002004-08-06 HIGH 10.0 CVE-2003-1096EPSS 10% The Cisco LEAP challenge/response authentication mechanism uses passwords in a way that is susceptible to dictionary attacks, which makes it easier f… Leap No fix yet Fix from $1,9502003-12-31 HIGH 9.3 CVE-2003-1398 Cisco IOS 12.0 through 12.2, when IP routing is disabled, accepts false ICMP redirect messages, which allows remote attackers to cause a denial of se… iOS Mitigation only Fix from $1,9502003-12-31 MEDIUM 5.0 CVE-2003-1132 The DNS server for Cisco Content Service Switch (CSS) 11000 and 11500, when prompted for a nonexistent AAAA record, responds with response code 3 (NX… Content Services Switch 11000 Mitigation only Fix from $1,6002003-12-31 MEDIUM 5.0 CVE-2003-0511EPSS 9% The web server for Cisco Aironet AP1x00 Series Wireless devices running certain versions of IOS 12.2 allow remote attackers to cause a denial of serv… iOS Mitigation only Fix from $1,6002003-08-27 MEDIUM 5.0 CVE-2003-0512 Cisco IOS 12.2 and earlier generates a "% Login invalid" message instead of prompting for a password when an invalid username is provided, which allo… iOS Mitigation only Fix from $1,6002003-08-27