Browse CVEs

HIGH 7.5 CVE-2001-0864 Cisco 12000 with IOS 12.0 and line cards based on Engine 2 does not properly handle the implicit "deny ip any any" rule in an outgoing ACL when the A… 12000 Router Patch available Fix from $1,9502001-12-06 HIGH 7.5 CVE-2001-0865 Cisco 12000 with IOS 12.0 and line cards based on Engine 2 does not support the "fragment" keyword in an outgoing ACL, which could allow fragmented p… 12000 Router Patch available Fix from $1,9502001-12-06 HIGH 7.5 CVE-2001-0866 Cisco 12000 with IOS 12.0 and lines card based on Engine 2 does not properly handle an outbound ACL when an input ACL is not configured on all the in… 12000 Router Mitigation only Fix from $1,9502001-12-06 HIGH 7.5 CVE-2001-0867 Cisco 12000 with IOS 12.0 and line cards based on Engine 2 does not properly filter does not properly filter packet fragments even when the "fragment… 12000 Router Mitigation only Fix from $1,9502001-12-06 MEDIUM 5.0 CVE-2001-0861 Cisco 12000 with IOS 12.0 and line cards based on Engine 2 and earlier allows remote attackers to cause a denial of service (CPU consumption) by floo… 12000 Router Patch available Fix from $1,6002001-12-06 MEDIUM 5.0 CVE-2001-0863 Cisco 12000 with IOS 12.0 and line cards based on Engine 2 does not handle the "fragment" keyword in a compiled ACL (Turbo ACL) for packets that are … 12000 Router Mitigation only Fix from $1,6002001-12-06 HIGH 7.5 CVE-2001-0929 Cisco IOS Firewall Feature set, aka Context Based Access Control (CBAC) or Cisco Secure Integrated Software, for IOS 11.2P through 12.2T does not pro… iOS Patch available Fix from $1,9502001-11-28 MEDIUM 5.0 CVE-2001-0895 Multiple Cisco networking products allow remote attackers to cause a denial of service on the local network via a series of ARP packets sent to the r… Catalyst 2900xl Patch available Fix from $1,6002001-11-15 HIGH 7.5 CVE-2001-0669 Various Intrusion Detection Systems (IDS) including (1) Cisco Secure Intrusion Detection System, (2) Cisco Catalyst 6000 Intrusion Detection System M… Catalyst 6000 Intrusion Detection System Module Patch available Fix from $1,9502001-10-30 HIGH 7.5 CVE-2001-0751 Cisco switches and routers running CBOS 2.3.8 and earlier use predictable TCP Initial Sequence Numbers (ISN), which allows remote attackers to spoof … Cbos after 2.3.8 Fix from $1,9502001-10-18 HIGH 7.5 CVE-2001-0753 Cisco CBOS 2.3.8 and earlier stores the passwords for (1) exec and (2) enable in cleartext in the NVRAM and a configuration file, which could allow u… Cbos after 2.3.8 Fix from $1,9502001-10-18 HIGH 7.5 CVE-2001-0757 Cisco 6400 Access Concentrator Node Route Processor 2 (NRP2) 12.1DC card does not properly disable access when a password has not been set for vtys, … 6400 Nrp 2 Patch available Fix from $1,9502001-10-18 MEDIUM 5.0 CVE-2001-0750 Cisco IOS 12.1(2)T, 12.1(3)T allow remote attackers to cause a denial of service (reload) via a connection to TCP ports 3100-3999, 5100-5999, 7100-79… iOS Patch available Fix from $1,6002001-10-18 MEDIUM 5.0 CVE-2001-0752 Cisco CBOS 2.3.8 and earlier allows remote attackers to cause a denial of service via an ICMP ECHO REQUEST (ping) with the IP Record Route option set. Cbos after 2.3.8 Fix from $1,6002001-10-18 MEDIUM 5.0 CVE-2001-0754 Cisco CBOS 2.3.8 and earlier allows remote attackers to cause a denial of service via a series of large ICMP ECHO REPLY (ping) packets, which cause i… Cbos after 2.3.8 Fix from $1,6002001-10-18 MEDIUM 5.0 CVE-2001-0783 Cisco TFTP server 1.1 allows remote attackers to read arbitrary files via a ..(dot dot) attack in the GET command. Tftp Server Patch available Fix from $1,6002001-10-18 MEDIUM 5.0 CVE-2001-1071 Cisco IOS 12.2 and earlier running Cisco Discovery Protocol (CDP) allows remote attackers to cause a denial of service (memory consumption) via a flo… iOS Patch available Fix from $1,6002001-10-09 MEDIUM 5.0 CVE-2001-0650 Cisco devices IOS 12.0 and earlier allow a remote attacker to cause a crash, or bad route updates, via malformed BGP updates with unrecognized transi… iOS after 12.0 Fix from $1,6002001-09-20 HIGH 7.5 CVE-2001-1105 RSA BSAFE SSL-J 3.0, 3.0.1 and 3.1, as used in Cisco iCND 2.0, caches session IDs from failed login attempts, which could allow remote attackers to b… Icdn Patch available Fix from $1,9502001-09-12 MEDIUM 5.0 CVE-2001-0711 Cisco IOS 11.x and 12.0 with ATM support allows attackers to cause a denial of service via the undocumented Interim Local Management Interface (ILMI)… iOS Patch available Fix from $1,6002001-08-31 MEDIUM 5.0 CVE-2001-1064EPSS 5% Cisco 600 series routers running CBOS 2.0.1 through 2.4.2ap allows remote attackers to cause a denial of service via multiple connections to the rout… Cbos after 2.4.2ap Fix from $1,6002001-08-31 MEDIUM 5.0 CVE-2001-1065 Web-based configuration utility in Cisco 600 series routers running CBOS 2.0.1 through 2.4.2ap binds itself to port 80 even when web-based configurat… Cbos after 2.4.2ap Fix from $1,6002001-08-31 HIGH 7.5 CVE-2001-0621 The FTP server on Cisco Content Service 11000 series switches (CSS) before WebNS 4.01B23s and WebNS 4.10B13s allows an attacker who is an FTP user to… Content Services Switch 11000 Patch available Fix from $1,9502001-08-14 HIGH 7.5 CVE-2001-0622 The web management service on Cisco Content Service series 11000 switches (CSS) before WebNS 4.01B29s or WebNS 4.10B17s allows a remote attacker to g… Content Services Switch 11000 Patch available Fix from $1,9502001-08-14 MEDIUM 5.0 CVE-2001-0566EPSS 6% Cisco Catalyst 2900XL switch allows a remote attacker to create a denial of service via an empty UDP packet sent to port 161 (SNMP) when SNMP is dis… Catalyst 2900 Mitigation only Fix from $1,6002001-08-14 MEDIUM 5.0 CVE-2001-1097 Cisco routers and switches running IOS 12.0 through 12.2.1 allows a remote attacker to cause a denial of service via a flood of UDP packets. iOS Mitigation only Fix from $1,6002001-07-24 HIGH 9.3 CVE-2001-0537EPSS 68% HTTP server for Cisco IOS 11.3 to 12.2 allows attackers to bypass authentication and execute arbitrary commands, when local authorization is being us… iOS Patch available Fix from $1,9502001-07-21 MEDIUM 5.0 CVE-2001-1183 PPTP implementation in Cisco IOS 12.1 and 12.2 allows remote attackers to cause a denial of service (crash) via a malformed packet. iOS Patch available Fix from $1,6002001-07-12 MEDIUM 5.0 CVE-2001-1038 Cisco SN 5420 Storage Router 1.1(3) and earlier allows remote attackers to cause a denial of service (reboot) via a series of connections to TCP port… Sn 5420 Storage Router Firmware Mitigation only Fix from $1,6002001-07-11 MEDIUM 5.0 CVE-2001-0428 Cisco VPN 3000 series concentrators before 2.5.2(F) allow remote attackers to cause a denial of service via an IP packet with an invalid IP option. Vpn 3000 Concentrator Series Software Patch available Fix from $1,6002001-07-02