telepresence system 500-37 vulnerabilities and exploits

(subscribe to this query)

8.3

CVSSv2

The System Status Collection Daemon (SSCD) in Cisco TelePresence System 500-37, 1000, 1300-65, and 3xxx prior to 1.10.2(42), and 500-32, 1300-47, TX1310 65, and TX9xxx prior to 6.0.4(11), allows remote malicious users to execute arbitrary commands or cause a denial of service (st...

Cisco Telepresence System Software 1.9.3\\(44\\)Cisco Telepresence System Software 1.9.2\\(19\\)Cisco Telepresence System Software 1.8.1\\(34\\)Cisco Telepresence System Software 1.8.0\\(55\\)Cisco Telepresence System Software 1.9.5\\(7\\)Cisco Telepresence System Software 1.9.4\\(19\\)Cisco Telepresence System Software 1.8.3\\(4\\)Cisco Telepresence System Software 1.8.2\\(11\\)Cisco Telepresence System Software 1.10.0\\(259\\)Cisco Telepresence System Software 1.10.0 Cisco Telepresence System Software 1.9.1\\(68\\)Cisco Telepresence System Software 1.9.0\\(46\\)Cisco Telepresence System Software 1.7.6\\(4\\)Cisco Telepresence System Software 1.7.5\\(42\\)Cisco Telepresence System Software 1.10.1 Cisco Telepresence System Software 1.9.6.1\\(3\\)Cisco Telepresence System Software 1.9.6\\(2\\)Cisco Telepresence System Software 1.8.5\\(4\\)Cisco Telepresence System Software 1.8.4\\(13\\)Cisco Telepresence System Software 1.5.10\\(3648\\)Cisco Telepresence System Software Cisco Telepresence System 3010

5

CVSSv2

During a renegotiation handshake if the Encrypt-Then-Mac extension is negotiated where it was not in the original handshake (or vice-versa) then this can cause OpenSSL 1.1.0 prior to 1.1.0e to crash (dependent on ciphersuite). Both clients and servers are affected.

Openssl Openssl 1.1.0 Openssl Openssl 1.1.0c Openssl Openssl 1.1.0d Openssl Openssl 1.1.0a Openssl Openssl 1.1.0b Hp Operations Agent 11.15 Hp Operations Agent 11.14

1 Github repository

5

CVSSv2

An integer overflow can occur in NTP-dev.4.3.70 leading to an out-of-bounds memory copy operation when processing a specially crafted private mode packet. The crafted packet needs to have the correct message authentication code and a valid timestamp. When processed by the NTP dae...

Ntp Ntp-dev 4.3.70

6.5

CVSSv2

Use-after-free vulnerability in ntpd in NTP 4.2.x prior to 4.2.8p4, and 4.3.x prior to 4.3.77 allows remote authenticated users to possibly execute arbitrary code or cause a denial of service (crash) via crafted packets.

Ntp Ntp Ntp Ntp 4.2.8 Netapp Oncommand Balance -Netapp Oncommand Performance Manager -Netapp Oncommand Unified Manager -Netapp Clustered Data Ontap -Netapp Data Ontap -

3.5

CVSSv2

Directory traversal vulnerability in the save_config function in ntpd in ntp_control.c in NTP prior to 4.2.8p4, when used on systems that do not use '\' or '/' characters for directory separation such as OpenVMS, allows remote authenticated users to overwrite ...

Ntp Ntp Ntp Ntp 4.2.8

6.5

CVSSv2

Buffer overflow in the password management functionality in NTP 4.2.x prior to 4.2.8p4, and 4.3.x prior to 4.3.77 allows remote authenticated users to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted key file.

Ntp Ntp Ntp Ntp 4.2.8 Netapp Oncommand Balance -Netapp Oncommand Performance Manager -Netapp Oncommand Unified Manager -Netapp Clustered Data Ontap -Netapp Data Ontap -

7.5

CVSSv2

The datalen parameter in the refclock driver in NTP 4.2.x prior to 4.2.8p4, and 4.3.x prior to 4.3.77 allows remote malicious users to execute arbitrary code or cause a denial of service (crash) via a negative input value.

Ntp Ntp Ntp Ntp 4.2.8 Netapp Oncommand Balance -Netapp Oncommand Performance Manager -Netapp Oncommand Unified Manager -Netapp Clustered Data Ontap -Netapp Data Ontap -

5

CVSSv2

In OpenSSL 1.1.0 prior to 1.1.0d, if a malicious server supplies bad parameters for a DHE or ECDHE key exchange then this can result in the client attempting to dereference a NULL pointer leading to a client crash. This could be exploited in a Denial of Service attack.

Openssl Openssl 1.1.0c Openssl Openssl 1.1.0 Openssl Openssl 1.1.0b Openssl Openssl 1.1.0a Oracle Agile Engineering Data Management 6.2.0 Oracle Jd Edwards World Security A9.2 Oracle Communications Eagle Lnp Application Processor 10.1 Oracle Communications Application Session Controller 3.7.1 Oracle Jd Edwards World Security A9.4 Oracle Jd Edwards Enterpriseone Tools 9.2 Oracle Communications Operations Monitor 3.4 Oracle Communications Operations Monitor 4.0 Oracle Agile Engineering Data Management 6.1.3 Oracle Jd Edwards World Security A9.1 Oracle Jd Edwards World Security A9.3 Oracle Communications Eagle Lnp Application Processor 10.0 Oracle Communications Eagle Lnp Application Processor 10.2 Oracle Communications Application Session Controller 3.8.0

1 EDB exploit1 Github repository1 Article

7.5

CVSSv2

The rate limiting feature in NTP 4.x prior to 4.2.8p4 and 4.3.x prior to 4.3.77 allows remote malicious users to have unspecified impact via a large number of crafted requests.

Ntp Ntp Ntp Ntp 4.2.8 Netapp Oncommand Performance Manager -Netapp Oncommand Unified Manager -Netapp Clustered Data Ontap -Netapp Data Ontap -Citrix Xenserver 6.0.2 Citrix Xenserver 6.2.0 Citrix Xenserver 6.5 Citrix Xenserver 7.0 Siemens Tim 4r-ie Firmware Siemens Tim 4r-ie Dnp3 Firmware

4

CVSSv2

ntpd in NTP 4.2.x prior to 4.2.8p4, and 4.3.x prior to 4.3.77 allows remote authenticated users to cause a denial of service (infinite loop or crash) by pointing the key file at the log file.

Ntp Ntp Ntp Ntp 4.2.8 Debian Debian Linux 7.0 Debian Debian Linux 8.0 Debian Debian Linux 9.0 Netapp Oncommand Balance -Netapp Oncommand Performance Manager -Netapp Oncommand Unified Manager -Netapp Clustered Data Ontap -Netapp Data Ontap -

Get Started

1 2 3 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook