Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

cisco firewall services module 2.2 vulnerabilities and exploits

(subscribe to this query)
5
CVSSv2
CVE-2003-1001
Buffer overflow in the Cisco Firewall Services Module (FWSM) in Cisco Catalyst 6500 and 7600 series devices allows remote malicious users to cause a denial of service (crash and reload) via HTTP auth requests for (1) TACACS+ or (2) RADIUS authentication.
Cisco Catalyst 6500 Ws-svc-nam-1 2.2\\(1a\\)Cisco Catalyst 6500 Ws-x6380-nam 3.1\\(1a\\)Cisco Catalyst 7600 Ws-svc-nam-1 3.1\\(1a\\)Cisco Catalyst 7600 Ws-svc-nam-2 3.1\\(1a\\)Cisco Catos 5.4\\(1\\)Cisco Catos 7.6\\(1\\)Cisco Catalyst 6500 Ws-svc-nam-1 3.1\\(1a\\)Cisco Catalyst 6500 Ws-svc-nam-2 2.2\\(1a\\)Cisco Catalyst 6500 Ws-svc-nam-2 3.1\\(1a\\)Cisco Catalyst 6500 Ws-x6380-nam 2.1\\(2\\)Cisco Catalyst 7600 Ws-x6380-nam 2.1\\(2\\)Cisco Catalyst 7600 Ws-x6380-nam 3.1\\(1a\\)Cisco Firewall Services ModuleCisco Firewall Services Module 1.1.2Cisco Catalyst 6500Cisco Catalyst 7600 Ws-svc-nam-1 2.2\\(1a\\)Cisco Catalyst 7600 Ws-svc-nam-2 2.2\\(1a\\)Cisco Catos 7.5\\(1\\)
5
CVSSv2
CVE-2003-1002
Cisco Firewall Services Module (FWSM) in Cisco Catalyst 6500 and 7600 series devices allows remote malicious users to cause a denial of service (crash and reload) via an SNMPv3 message when snmp-server is set.
Cisco Catalyst 6500 Ws-x6380-nam 2.1\\(2\\)Cisco Catalyst 7600 Ws-svc-nam-1 2.2\\(1a\\)Cisco Catalyst 7600 Ws-x6380-nam 3.1\\(1a\\)Cisco Firewall Services Module 1.1.2Cisco Catos 7.5\\(1\\)Cisco Catalyst 6500Cisco Catalyst 6500 Ws-svc-nam-1 2.2\\(1a\\)Cisco Catalyst 6500 Ws-svc-nam-1 3.1\\(1a\\)Cisco Catalyst 6500 Ws-svc-nam-2 2.2\\(1a\\)Cisco Catos 7.6\\(1\\)Cisco Catalyst 7600 Ws-svc-nam-1 3.1\\(1a\\)Cisco Catalyst 7600 Ws-svc-nam-2 2.2\\(1a\\)Cisco Catalyst 7600 Ws-svc-nam-2 3.1\\(1a\\)Cisco Catalyst 7600 Ws-x6380-nam 2.1\\(2\\)Cisco Catalyst 6500 Ws-svc-nam-2 3.1\\(1a\\)Cisco Catalyst 6500 Ws-x6380-nam 3.1\\(1a\\)Cisco Firewall Services ModuleCisco Catos 5.4\\(1\\)
7.8
CVSSv2
CVE-2009-0638
The Cisco Firewall Services Module (FWSM) 2.x, 3.1 prior to 3.1(16), 3.2 prior to 3.2(13), and 4.0 prior to 4.0(6) for Cisco Catalyst 6500 switches and Cisco 7600 routers allows remote malicious users to cause a denial of service (traffic-handling outage) via a series of malforme...
Cisco Firewall Services Module 2.1 \\(0.208\\)Cisco Firewall Services Module 2.3Cisco Firewall Services Module 3.2\\(2\\)Cisco Firewall Services Module 3.2\\(3\\)Cisco Firewall Services Module 2.3\\(1\\)Cisco Firewall Services Module 3.1Cisco Firewall Services Module 4.0Cisco Firewall Services Module 4.0\\(4\\)Cisco Firewall Services Module 3.2Cisco Firewall Services Module 3.2\\(1\\)Cisco Firewall Services Module 3.1\\(5\\)Cisco Firewall Services Module 3.1\\(6\\)Cisco Firewall Services Module 2.2\\(1\\)Cisco Firewall Services Module 2.2
5
CVSSv2
CVE-2004-0112
The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check the length of Kerberos tickets during a handshake, which allows remote malicious users to cause a denial of service (crash) via a crafted SSL/TLS handshak...
Cisco Firewall Services ModuleSymantec Clientless Vpn Gateway 4400 5.0Hp Apache-based Web Server 2.0.43.00Cisco Firewall Services Module 1.1.3Cisco Firewall Services Module 1.1.2Hp Aaa ServerCisco Firewall Services Module 1.1 \\(3.005\\)Hp Apache-based Web Server 2.0.43.04Cisco Firewall Services Module 2.1 \\(0.208\\)Avaya Sg203 4.4Hp Hp-ux 11.11Redhat Enterprise Linux Desktop 3.0Hp Hp-ux 11.23Cisco Ciscoworks Common Management Foundation 2.1Freebsd Freebsd 5.1Avaya Sg208 4.4Redhat Enterprise Linux 3.0Avaya Sg200 4.4Avaya Sg5 4.4Redhat Linux 7.2Cisco Ciscoworks Common Services 2.2Openbsd Openbsd 3.3
5.8
CVSSv2
CVE-2009-3555
The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and previous versions, OpenSSL prior to 0.9.8l, GnuTLS 2.8.5 and previous versions, Mozilla Network Security Ser...
Openssl Openssl 1.0Apache Http ServerOpenssl OpensslGnu GnutlsMozilla NssDebian Debian Linux 5.0Canonical Ubuntu Linux 10.10Fedoraproject Fedora 11Fedoraproject Fedora 13Debian Debian Linux 4.0Debian Debian Linux 8.0Debian Debian Linux 7.0Canonical Ubuntu Linux 9.04Debian Debian Linux 6.0Fedoraproject Fedora 12Canonical Ubuntu Linux 8.04Canonical Ubuntu Linux 10.04Canonical Ubuntu Linux 8.10Canonical Ubuntu Linux 9.10Fedoraproject Fedora 14F5 Nginx
5
CVSSv2
CVE-2004-0079
The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote malicious users to cause a denial of service (crash) via a crafted SSL/TLS handshake that triggers a null dereference.
Cisco Firewall Services ModuleSymantec Clientless Vpn Gateway 4400 5.0Hp Apache-based Web Server 2.0.43.00Cisco Firewall Services Module 1.1.3Cisco Firewall Services Module 1.1.2Hp Aaa ServerCisco Firewall Services Module 1.1 \\(3.005\\)Hp Apache-based Web Server 2.0.43.04Cisco Firewall Services Module 2.1 \\(0.208\\)Avaya Sg203 4.4Hp Hp-ux 11.11Redhat Enterprise Linux Desktop 3.0Hp Hp-ux 11.23Cisco Ciscoworks Common Management Foundation 2.1Freebsd Freebsd 5.1Avaya Sg208 4.4Redhat Enterprise Linux 3.0Avaya Sg200 4.4Avaya Sg5 4.4Redhat Linux 7.2Cisco Ciscoworks Common Services 2.2Openbsd Openbsd 3.3
5
CVSSv2
CVE-2004-0081
OpenSSL 0.9.6 prior to 0.9.6d does not properly handle unknown message types, which allows remote malicious users to cause a denial of service (infinite loop), as demonstrated using the Codenomicon TLS Test Tool.
Cisco Firewall Services Module 1.1.3Cisco Firewall Services Module 1.1 \\(3.005\\)Cisco Firewall Services ModuleCisco Firewall Services Module 1.1.2Symantec Clientless Vpn Gateway 4400 5.0Hp Apache-based Web Server 2.0.43.00Hp Apache-based Web Server 2.0.43.04Cisco Firewall Services Module 2.1 \\(0.208\\)Hp Aaa ServerCisco Ciscoworks Common Management Foundation 2.1Cisco Ciscoworks Common Services 2.2Avaya Sg208 4.4Avaya Sg5 4.2Avaya Sg5 4.3Freebsd Freebsd 5.1Hp Hp-ux 8.05Openbsd Openbsd 3.3Redhat Linux 8.0Sco Openserver 5.0.6Avaya Sg203 4.4Avaya Sg208Freebsd Freebsd 4.8
5.8
CVSSv2
CVE-2017-6607
A vulnerability in the DNS code of Cisco ASA Software could allow an unauthenticated, remote malicious user to cause an affected device to reload or corrupt the information present in the device's local DNS cache. The vulnerability is due to a flaw in handling crafted DNS re...
Cisco Adaptive Security Appliance Software 9.3.2Cisco Adaptive Security Appliance Software 9.1.1.4Cisco Adaptive Security Appliance Software 9.1.4Cisco Adaptive Security Appliance Software 9.2.2.7Cisco Adaptive Security Appliance Software 9.1.5.21Cisco Adaptive Security Appliance Software 9.1.3Cisco Adaptive Security Appliance Software 9.1.2Cisco Adaptive Security Appliance Software 9.2.3Cisco Adaptive Security Appliance Software 9.3.1.1Cisco Adaptive Security Appliance Software 9.1.1Cisco Adaptive Security Appliance Software 9.2.2.8Cisco Adaptive Security Appliance Software 9.3.1Cisco Adaptive Security Appliance Software 9.1.2.8Cisco Adaptive Security Appliance Software 9.1.5.15Cisco Adaptive Security Appliance Software 9.1.5.10Cisco Adaptive Security Appliance Software 9.2.1Cisco Adaptive Security Appliance Software 9.3.2.2Cisco Adaptive Security Appliance Software 9.1.5Cisco Adaptive Security Appliance Software 9.2.2.4Cisco Adaptive Security Appliance Software 9.1.5.12Cisco Adaptive Security Appliance Software 9.1.3.2Cisco Adaptive Security Appliance Software 9.1.4.5
7.8
CVSSv2
CVE-2005-3671
The Internet Key Exchange version 1 (IKEv1) implementation in Openswan 2 (openswan-2) prior to 2.4.4, and freeswan in SUSE LINUX 9.1 prior to 2.04_1.5.4-1.23, allow remote malicious users to cause a denial of service via (1) a crafted packet using 3DES with an invalid key length,...
Openswan Openswan 2.2Xelerance Openswan 2.4.0Frees Wan Frees Wan 2.04Openswan Openswan 2.1.6Openswan Openswan 2.3Openswan Openswan 2.1.1Openswan Openswan 2.1.2Openswan Openswan 2.1.4Openswan Openswan 2.1.5
5.8
CVSSv2
CVE-2015-8140
The ntpq protocol in NTP prior to 4.2.8p7 allows remote malicious users to conduct replay attacks by sniffing the network.
Ntp Ntp
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionSSRFbuffer overflowCVE-2023-28952CVE-2023-41822CVE-2024-27956CVE-2023-7028CVE-2024-34447CVE-2024-34460
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook