Vulnerabilities > Cisco

DATE CVE VULNERABILITY TITLE RISK
2005-09-08 CVE-2005-2841 Denial-Of-Service vulnerability in IOS
Buffer overflow in Firewall Authentication Proxy for FTP and/or Telnet Sessions for Cisco IOS 12.2ZH and 12.2ZL, 12.3 and 12.3T, and 12.4 and 12.4T allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted user authentication credentials.
network
low complexity
cisco
7.5
2005-08-26 CVE-2005-2695 Unspecified vulnerability in Cisco products
Unspecified vulnerability in the SSL certificate checking functionality in Cisco CiscoWorks Management Center for IDS Sensors (IDSMC) 2.0 and 2.1, and Monitoring Center for Security (Security Monitor or Secmon) 1.1 through 2.0 and 2.1, allows remote attackers to spoof a Cisco Intrusion Detection Sensor (IDS) or Intrusion Prevention System (IPS).
network
low complexity
cisco
5.0
2005-08-23 CVE-2005-2681 Local Privilege Escalation vulnerability in Cisco Intrusion Prevention System
Unspecified vulnerability in the command line processing (CLI) logic in Cisco Intrusion Prevention System 5.0(1) and 5.0(2) allows local users with OPERATOR or VIEWER privileges to gain additional privileges via unknown vectors.
local
low complexity
cisco
7.2
2005-08-23 CVE-2005-2631 Unspecified vulnerability in Cisco Network Admission Control Manager and Server System Software
Cisco Clean Access (CCA) 3.3.0 to 3.3.9, 3.4.0 to 3.4.5, and 3.5.0 to 3.5.3 does not properly authenticate users when invoking API methods, which could allow remote attackers to bypass security checks, change the assigned role of a user, or disconnect users.
network
low complexity
cisco
7.5
2005-08-03 CVE-2005-2451 Unspecified vulnerability in Cisco IOS and IOS XR
Cisco IOS 12.0 through 12.4 and IOS XR before 3.2, with IPv6 enabled, allows remote attackers on a local network segment to cause a denial of service (device reload) and possibly execute arbitrary code via a crafted IPv6 packet.
local
low complexity
cisco
2.1
2005-07-18 CVE-2005-2280 Unspecified vulnerability in Cisco Security Agent 4.5
Cisco Security Agent (CSA) 4.5 allows remote attackers to cause a denial of service (system crash) via a crafted IP packet.
network
low complexity
cisco
5.0
2005-07-18 CVE-2005-2279 Remote Denial Of Service vulnerability in Cisco ONS 15216 OADM Management Plane Telnet Service
Cisco ONS 15216 Optical Add/Drop Multiplexer (OADM) running firmware 2.2.2 and earlier allows remote attackers to cause a denial of service (management plane session loss) via crafted telnet data.
network
low complexity
cisco
5.0
2005-07-12 CVE-2005-2244 Remote Heap Buffer Overflow vulnerability in Cisco CallManager AUPair Service
The aupair service (aupair.exe) in Cisco CallManager (CCM) 3.2 and earlier, 3.3 before 3.3(5), 4.0 before 4.0(2a)SR2b, and 4.1 4.1 before 4.1(3)SR1 allows remote attackers to execute arbitrary code or corrupt memory via crafted packets that trigger a memory allocation failure and lead to a buffer overflow.
network
low complexity
cisco
5.0
2005-07-12 CVE-2005-2243 Failed Logins Remote Denial Of Service vulnerability in Cisco CallManager
Memory leak in inetinfo.exe in Cisco CallManager (CCM) 3.2 and earlier, 3.3 before 3.3(5), 4.0 before 4.0(2a)SR2b, and 4.1 4.1 before 4.1(3)SR1, when Multi Level Admin (MLA) is enabled, allows remote attackers to cause a denial of service (memory consumption) via a large number of Admin Service Tool (AST) logins that fail.
network
low complexity
cisco
5.0
2005-07-12 CVE-2005-2242 Remote Denial Of Service vulnerability in Cisco CallManager CTI Manager
Cisco CallManager (CCM) 3.2 and earlier, 3.3 before 3.3(5), 4.0 before 4.0(2a)SR2b, and 4.1 4.1 before 4.1(3)SR1 allows remote attackers to cause a denial of service (memory consumption and restart) via crafted packets to (1) the CTI Manager (ctimgr.exe) or (2) the CallManager (ccm.exe).
network
low complexity
cisco
5.0