Vulnerabilities > Cisco > Low

DATE CVE VULNERABILITY TITLE RISK
2005-08-03 CVE-2005-2451 Unspecified vulnerability in Cisco IOS and IOS XR
Cisco IOS 12.0 through 12.4 and IOS XR before 3.2, with IPv6 enabled, allows remote attackers on a local network segment to cause a denial of service (device reload) and possibly execute arbitrary code via a crafted IPv6 packet.
local
low complexity
cisco
2.1
2002-10-04 CVE-2002-0881 Unspecified vulnerability in Cisco products
Cisco IP Phone (VoIP) models 7910, 7940, and 7960 use a default administrative password, which allows attackers with physical access to the phone to modify the configuration settings.
local
low complexity
cisco
2.1
2001-10-18 CVE-2001-0741 Denial of Service vulnerability in Cisco HSRP
Cisco Hot Standby Routing Protocol (HSRP) allows local attackers to cause a denial of service by spoofing HSRP packets.
local
low complexity
cisco
2.1
2001-10-10 CVE-2001-1098 Unspecified vulnerability in Cisco PIX Firewall Manager 4.3(2)G
Cisco PIX firewall manager (PFM) 4.3(2)g logs the enable password in plaintext in the pfm.log file, which could allow local users to obtain the password by reading the file.
local
low complexity
cisco
2.1
2001-07-02 CVE-2001-0444 Unspecified vulnerability in Cisco Cbos 2.3.053/2.4.1
Cisco CBOS 2.3.0.053 sends output of the "sh nat" (aka "show nat") command to the terminal of the next user who attempts to connect to the router via telnet, which could allow that user to obtain sensitive information.
local
low complexity
cisco
2.1
2001-03-12 CVE-2000-0368 Information Exposure vulnerability in Cisco IOS
Classic Cisco IOS 9.1 and later allows attackers with access to the login prompt to obtain portions of the command history of previous users, which may allow the attacker to access sensitive data.
local
low complexity
cisco CWE-200
2.1
2001-02-12 CVE-2001-0019 Unspecified vulnerability in Cisco Arrowpoint and Content Services Switch
Arrowpoint (aka Cisco Content Services, or CSS) allows local users to cause a denial of service via a long argument to the "show script," "clear script," "show archive," "clear archive," "show log," or "clear log" commands.
local
low complexity
cisco
2.1
2001-02-12 CVE-2001-0020 Unspecified vulnerability in Cisco Arrowpoint and Content Services Switch
Directory traversal vulnerability in Arrowpoint (aka Cisco Content Services, or CSS) allows local unprivileged users to read arbitrary files via a ..
local
low complexity
cisco
2.1
1999-12-31 CVE-1999-1042 Unspecified vulnerability in Cisco Resource Manager 1.0/1.1
Cisco Resource Manager (CRM) 1.0 and 1.1 creates world-readable log files and temporary files, which may expose sensitive information, to local users such as user IDs, passwords and SNMP community strings.
local
high complexity
cisco
1.2
1999-12-31 CVE-1999-1126 Unspecified vulnerability in Cisco Resource Manager 1.0/1.1
Cisco Resource Manager (CRM) 1.1 and earlier creates certain files with insecure permissions that allow local users to obtain sensitive configuration information including usernames, passwords, and SNMP community strings, from (1) swim_swd.log, (2) swim_debug.log, (3) dbi_debug.log, and (4) temporary files whose names begin with "DPR_".
local
low complexity
cisco
2.1