cisco content distribution manager 4650 4.0 vulnerabilities and exploits

(subscribe to this query)

7.5

CVSSv2

Buffer overflow in the authentication module for Cisco ACNS 4.x prior to 4.2.11, and 5.x prior to 5.0.5, allows remote malicious users to execute arbitrary code via a long password.

Cisco Application And Content Networking Software 5.0 Cisco Application And Content Networking Software 5.0.1 Cisco Content Distribution Manager 4650 4.1 Cisco Content Distribution Manager 4670 Cisco Content Engine 560 3.1 Cisco Content Engine 560 4.0 Cisco Content Engine 7320 Cisco Content Engine 7320 2.2 .0 Cisco Content Router 4430 Cisco Content Router 4450 Cisco Application And Content Networking Software 4.2.7 Cisco Application And Content Networking Software 4.2.9 Cisco Content Distribution Manager 4650 Cisco Content Distribution Manager 4650 4.0 Cisco Content Engine 560 Cisco Content Engine 560 2.2 .0 Cisco Content Engine 590 4.0 Cisco Content Engine 590 4.1 Cisco Content Engine Module For Cisco Router 3600 Series Cisco Content Engine Module For Cisco Router 3700 Series Cisco Application And Content Networking Software 4.0.3 Cisco Application And Content Networking Software 4.1.1

5

CVSSv2

The RealServer RealSubscriber on Cisco devices running Application and Content Networking System (ACNS) 5.1 allow remote malicious users to cause a denial of service (CPU consumption) via malformed packets.

Cisco Application And Content Networking Software 4.2.11 Cisco Application And Content Networking Software 4.2.9 Cisco Content Delivery Manager 4650 Cisco Content Distribution Manager 4630 Cisco Content Engine 507 Cisco Content Engine 507 2.2 .0 Cisco Content Engine 560 4.0 Cisco Content Engine 560 4.1 Cisco Content Engine 7320 Cisco Content Engine 7320 2.2 .0 Cisco Content Engine Module For Cisco Router 3600 Series Cisco Content Engine Module For Cisco Router 3700 Series Cisco Content Engine Module For Cisco Router 3800 Series Cisco Application And Content Networking Software 4.1.3 Cisco Application And Content Networking Software 4.2 Cisco Application And Content Networking Software 5.1 Cisco Content Delivery Manager 4630 Cisco Content Distribution Manager 4650 4.1 Cisco Content Distribution Manager 4670 Cisco Content Engine 560 2.2 .0 Cisco Content Engine 560 3.1 Cisco Content Engine 590 4.0

5

CVSSv2

Cisco devices running Application and Content Networking System (ACNS) 5.0, 5.1 prior to 5.1.13.7, or 5.2 prior to 5.2.3.9 allow remote malicious users to cause a denial of service (bandwidth consumption) via "crafted IP packets" that are continuously forwarded.

Cisco Application And Content Networking Software 4.2.11 Cisco Application And Content Networking Software 4.2.9 Cisco Application And Content Networking Software 5.0 Cisco Content Distribution Manager 4630 Cisco Content Distribution Manager 4630 4.0 Cisco Content Engine 507 2.2 .0 Cisco Content Engine 507 3.1 Cisco Content Engine 560 4.1 Cisco Content Engine 565 Cisco Content Engine 7320 2.2 .0 Cisco Content Engine 7320 3.1 Cisco Content Engine Module For Cisco Router 3700 Series Cisco Content Engine Module For Cisco Router 3800 Series Cisco Application And Content Networking Software 4.1.3 Cisco Application And Content Networking Software 4.2 Cisco Content Delivery Manager 4630 Cisco Content Delivery Manager 4650 Cisco Content Distribution Manager 4670 Cisco Content Engine 507 Cisco Content Engine 560 2.2 .0 Cisco Content Engine 560 3.1 Cisco Content Engine 560 4.0

7.5

CVSSv2

The default configuration of the proxy for Cisco Cache Engine and Content Engine allows remote malicious users to use HTTPS to make TCP connections to allowed IP addresses while hiding the actual source IP.

10

CVSSv2

Vulnerabilities in a large number of SNMP implementations allow remote malicious users to cause a denial of service or gain privileges via SNMPv1 trap handling, as demonstrated by the PROTOS c06-SNMPv1 test suite. NOTE: It is highly likely that this candidate will be SPLIT into m...

Snmp Snmp

10

CVSSv2

Vulnerabilities in the SNMPv1 request handling of a large number of SNMP implementations allow remote malicious users to cause a denial of service or gain privileges via (1) GetRequest, (2) GetNextRequest, and (3) SetRequest messages, as demonstrated by the PROTOS c06-SNMPv1 test...

Snmp Snmp

1 EDB exploit

7.5

CVSSv2

The decompression algorithm in zlib 1.1.3 and previous versions, as used in many different utilities and packages, causes inflateEnd to release certain memory more than once (a "double free"), which may allow local and remote malicious users to execute arbitrary code vi...

Zlib Zlib

5

CVSSv2

CVS prior to 1.10.8 does not properly initialize a global variable, which allows remote malicious users to cause a denial of service (server crash) via the diff capability.

Cvs Cvs

2.1

CVSSv2

rsync, when running in daemon mode, does not properly call setgroups before dropping privileges, which could provide supplemental group privileges to local users, who could then read certain files that would otherwise be disallowed.

Samba Rsync Redhat Linux 6.2 Redhat Linux 7.0 Redhat Linux 7.1 Redhat Linux 7.2

Get Started

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook