CVE List
| Id | CVE No. | Status | Description | Phase | Votes | Comments | Actions |
|---|---|---|---|---|---|---|---|
| 2840 | CVE-2001-0019 | Candidate | Arrowpoint (aka Cisco Content Services, or CSS) allows local users to cause a denial of service via a long argument to the "show script," "clear script," "show archive," "clear archive," "show log," or "clear log" commands. | Proposed (20010202) | ACCEPT(4) Baker, Cole, Prosser, Ziese | MODIFY(1) Frech | NOOP(2) Christey, Wall | Frech> XF:cisco-ccs-cli-dos(6030) | I could not find anything in the Cisco reference that | indicates that this is a local-only vulnerability. Suggest dropping | the description of "local users" unless further information is | available. | Christey> XF:cisco-ccs-cli-dos | Christey> BID:2330 | URL:http://www.securityfocus.com/bid/2330 | Prosser> CISCO:20010131 Cisco Content Services Switch Vulnerability | http://www.cisco.com/warp/public/707/arrowpoint-cli-filesystem-pub.shtml | View |
| 3560 | CVE-2001-0753 | Candidate | Cisco CBOS 2.3.8 and earlier stores the passwords for (1) exec and (2) enable in cleartext in the NVRAM and a configuration file, which could allow unauthorized users to obtain the passwords and gain privileges. | Modified (20080822) | ACCEPT(4) Armstrong, Baker, Cole, Foat | MODIFY(1) Frech | NOOP(1) Wall | Frech> XF:cisco-cbos-gain-information(6453) | View |
| 1286 | CVE-1999-1306 | Candidate | Cisco IOS 9.1 and earlier does not properly handle extended IP access lists when the IP route cache is enabled and the "established" keyword is set, which could allow attackers to bypass filters. | Proposed (20010912) | ACCEPT(3) Cole, Foat, Stracener | MODIFY(1) Frech | NOOP(1) Wall | REVIEWING(1) Christey | Frech> XF:cisco-acl-established(1248) | Possibly duplicate with CVE-1999-0162? | Christey> Might be a duplicate of CVE-1999-0162, but CVE-1999-0162 was | released in 1995, whereas this bug was released in 1992. | View |
| 1446 | CVE-1999-1466 | Candidate | Vulnerability in Cisco routers versions 8.2 through 9.1 allows remote attackers to bypass access control lists when extended IP access lists are used on certain interfaces, the IP route cache is enabled, and the access list uses the "established" keyword. | Proposed (20010912) | ACCEPT(3) Cole, Foat, Stracener | MODIFY(1) Frech | NOOP(2) Christey, Wall | Frech> XF:cisco-acl-established(1248) | Possible dupe with CVE-1999-0162. | Christey> This is not a dupe with CVE-1999-0162. The Cisco advisory | referenced in CVE-1999-0162 says that affected Cisco versions | are 10.0 through 10.3. This CAN deals with versions 8.2 | through 9.1. In addition, the date of release of | CVE-1999-0162 is June 1995; this CAN was released December | 1992. Both items include clear Cisco acknowledgement with | details, so we should conclude that they are separate | problems, despite the vagueness of the reports. | View |
| 1156 | CVE-1999-1176 | Candidate | Buffer overflow in cidentd ident daemon allows local users to gain root privileges via a long line in the .authlie script. | Proposed (20010912) | MODIFY(1) Frech | NOOP(3) Cole, Foat, Wall | Frech> XF:cidentd-authlie-bo(7327) | View |
Page 194 of 20943, showing 5 records out of 104715 total, starting on record 966, ending on 970
