cisco nexus data broker vulnerabilities and exploits

(subscribe to this query)

A vulnerability in the configuration restore feature of Cisco Nexus Data Broker software could allow an unauthenticated, remote malicious user to perform a directory traversal attack on an affected device. The vulnerability is due to insufficient validation of configuration backu...

Cisco Nexus Data Broker

Nexus Data Broker (NDB) on Cisco Nexus 3000 devices with software 6.0(2)A6(1) allows remote malicious users to cause a denial of service (Java process restart) via crafted connections to the Java application, aka Bug ID CSCut87006.

Cisco Nx-os 6.0\\(2\\)a6\\(1\\)

Use-after-free vulnerability in ntpd in NTP 4.2.x prior to 4.2.8p4, and 4.3.x prior to 4.3.77 allows remote authenticated users to possibly execute arbitrary code or cause a denial of service (crash) via crafted packets.

Ntp Ntp Ntp Ntp 4.2.8 Netapp Oncommand Balance -Netapp Oncommand Performance Manager -Netapp Oncommand Unified Manager -Netapp Clustered Data Ontap -Netapp Data Ontap -

The datalen parameter in the refclock driver in NTP 4.2.x prior to 4.2.8p4, and 4.3.x prior to 4.3.77 allows remote malicious users to execute arbitrary code or cause a denial of service (crash) via a negative input value.

Ntp Ntp Ntp Ntp 4.2.8 Netapp Oncommand Balance -Netapp Oncommand Performance Manager -Netapp Oncommand Unified Manager -Netapp Clustered Data Ontap -Netapp Data Ontap -

Buffer overflow in the password management functionality in NTP 4.2.x prior to 4.2.8p4, and 4.3.x prior to 4.3.77 allows remote authenticated users to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted key file.

Ntp Ntp Ntp Ntp 4.2.8 Netapp Oncommand Balance -Netapp Oncommand Performance Manager -Netapp Oncommand Unified Manager -Netapp Clustered Data Ontap -Netapp Data Ontap -

ntpd in NTP 4.2.x prior to 4.2.8p4, and 4.3.x prior to 4.3.77 allows remote authenticated users to cause a denial of service (infinite loop or crash) by pointing the key file at the log file.

Ntp Ntp Ntp Ntp 4.2.8 Debian Debian Linux 7.0 Debian Debian Linux 8.0 Debian Debian Linux 9.0 Netapp Oncommand Balance -Netapp Oncommand Performance Manager -Netapp Oncommand Unified Manager -Netapp Clustered Data Ontap -Netapp Data Ontap -

The decodenetnum function in ntpd in NTP 4.2.x prior to 4.2.8p4, and 4.3.x prior to 4.3.77 allows remote malicious users to cause a denial of service (assertion failure) via a 6 or mode 7 packet containing a long data value.

Ntp Ntp Ntp Ntp 4.2.8 Debian Debian Linux 7.0 Debian Debian Linux 8.0 Debian Debian Linux 9.0 Netapp Oncommand Balance -Netapp Oncommand Performance Manager -Netapp Oncommand Unified Manager -Netapp Clustered Data Ontap -Netapp Data Ontap -Siemens Tim 4r-ie Firmware Siemens Tim 4r-ie Dnp3 Firmware

1 EDB exploit

The rate limiting feature in NTP 4.x prior to 4.2.8p4 and 4.3.x prior to 4.3.77 allows remote malicious users to have unspecified impact via a large number of crafted requests.

Ntp Ntp Ntp Ntp 4.2.8 Netapp Oncommand Performance Manager -Netapp Oncommand Unified Manager -Netapp Clustered Data Ontap -Netapp Data Ontap -Citrix Xenserver 6.0.2 Citrix Xenserver 6.2.0 Citrix Xenserver 6.5 Citrix Xenserver 7.0 Siemens Tim 4r-ie Firmware Siemens Tim 4r-ie Dnp3 Firmware

Crypto-NAK packets in ntpd in NTP 4.2.x prior to 4.2.8p4, and 4.3.x prior to 4.3.77 allows remote malicious users to bypass authentication.

Ntp Ntp 4.2.5 Ntp Ntp Ntp Ntp 4.2.8 Debian Debian Linux 7.0 Debian Debian Linux 8.0 Debian Debian Linux 9.0 Netapp Oncommand Balance -Netapp Oncommand Performance Manager -Netapp Oncommand Unified Manager -Netapp Clustered Data Ontap -Netapp Data Ontap -

An integer overflow can occur in NTP-dev.4.3.70 leading to an out-of-bounds memory copy operation when processing a specially crafted private mode packet. The crafted packet needs to have the correct message authentication code and a valid timestamp. When processed by the NTP dae...

Ntp Ntp-dev 4.3.70

1 2 3 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook