Cisco Security Notices

Cisco IPSec VPN Implementation Group Name Enumeration Vulnerability

Thu, 09 Nov 2006 07:00:00 PST

This Cisco Security Notice is being released in response to the Cisco VPN Concentrator Group Name Enumeration Vulnerability advisory published on June 20, 2005 by NTA Monitor at http://www.nta-monitor.com/news/vpn-flaws/cisco/VPN-Concentrator/index.htm.

Crafted DNS Packet Can Cause Denial Of Service

Fri, 21 Apr 2006 13:40:00 PST

Cisco IPsec VPN Implementation Group Password Usage Vulnerability

Thu, 26 Jan 2006 14:30:00 PST

Response to BugTraq - Cisco Clean Access Agent (Perfigo) Bypass

Mon, 07 Nov 2005 10:00:00 PST

This document is provided to simplify access to Cisco responses to possible product security vulnerability issues posted in public forums for Cisco customers. This does not imply that Cisco perceives each of these issues as an actual product security vulnerability. This notice is provided on an "as is" basis and does not imply any kind of guarantee or warranty. Your use of the information on the page or materials linked from this page are at your own risk. Cisco reserves the right to change or update this page without notice at any time.

CSS SSL Authentication Bypass

Thu, 08 Sep 2005 07:00:00 PST

The Cisco CSS 11500 Series Content Services Switches (CSS) running Secure Socket Layer (SSL) has a vulnerability that may allow a user to bypass SSL authentication and access protected content. Cisco has made free software available to address this vulnerability.

ZOTOB and WORM_RBOT.CBQ Mitigation Recommendations

Wed, 24 Aug 2005 09:00:00 PST

Cisco customers are currently experiencing attacks due to new worms and bots that are active on the Internet. The signature of these worms and bots appears as TCP traffic to port 445 as well as traffic to several secondary TCP ports depending on the variant of the worm. Affected customers have been experiencing high volumes of traffic from both internal and external systems. Symptoms on Cisco devices include, but are not limited to, high CPU and traffic drops on the input interfaces. This document focuses on both mitigation techniques and affected Cisco products that need software supplied by Cisco to patch properly.

Response to Full-Disclosure - Potential Denial of Service Bug in Cisco Pix Firewall IOS 6.2.2 and 6.3.(3.102)

Mon, 25 Jul 2005 14:50:00 PST

Cisco 802.1x Voice-Enabled Interfaces Allow Anonymous Voice VLAN Access

Wed, 08 Jun 2005 15:00:00 PST

This Cisco Security Notice is being released in response to the Cisco 802.1x Voice-Enabled Interfaces Allow Anonymous Voice VLAN Access advisory published on June 8, 2005 by FishNet Security at http://www.fishnetsecurity.com/csirt/disclosure/cisco/.

Vulnerability in a Variant of the TCP Timestamps Option

Mon, 23 May 2005 07:30:00 PST

W32.BLASTER Worm Mitigation Recommendations

Sun, 18 Jul 2004 23:00:00 PST

Cisco Internet Key Exchange Issue *Updated on 19-Jul-2004

Sun, 18 Jul 2004 23:00:00 PST

Dictionary Attack on Cisco LEAP Vulnerability

Sun, 18 Jul 2004 15:00:00 PST

Alleged Bypassing Access Control List in Cisco IOS

Wed, 26 May 2004 23:00:00 PST

Exploit for Multiple Cisco Vulnerabilities *Updated on 07-May-2004 0930 PDT

Fri, 07 May 2004 08:30:00 PST

Cisco Nachi Worm Mitigation Recommendations *Updated on 14-Oct-2003

Mon, 13 Oct 2003 23:00:00 PST

Response to BugTraq - Cisco 6509 Switch Telnet Vulnerability

Fri, 03 Oct 2003 23:00:00 PST

Response to BugTraq - PIX Denial of Service

Fri, 03 Oct 2003 07:00:00 PST

Response to BugTraq - Cisco CSS11000 Series DoS

Sat, 06 Sep 2003 23:00:00 PST

Data Leak in UDP Echo Service

Wed, 30 Jul 2003 23:00:00 PST

Sending 2GB Data in GET Request Causes Buffer Overflow in Cisco IOS Software

Tue, 29 Jul 2003 23:00:00 PST

Enumerating Locally Defined Users in Cisco IOS

Wed, 23 Jul 2003 23:00:00 PST

Response to BugTraq - Cisco VPN Client can be used to Gain Local Administrator Rights (All Versions, Patched or Otherwise)

Wed, 21 May 2003 23:00:00 PST

Response to BugTraq - Cisco ACL Bug when using VPN Crypto Engine Accelerator, PPPoE Dialer or IP Route-Cache

Wed, 14 May 2003 23:00:00 PST

Response to BugTraq - Cisco Systems VPN Client Allows Local Login with Elevated Privileges

Tue, 13 May 2003 23:00:00 PST

Cisco EIGRP Issue

Wed, 18 Dec 2002 23:00:00 PST

Response to BugTraq - Cisco as5350 Crashes with nmap Connect Scan

Mon, 28 Oct 2002 23:00:00 PST

Response to BugTraq - Cisco SCA 11000 Series Secure Content Accelerator OpenSSL Issue

Thu, 03 Oct 2002 23:00:00 PST

The Trivial Cisco IP Phones Compromise

Wed, 18 Sep 2002 23:00:00 PST

Response to BugTraq - VPN 3000 Gateway MTU Overflow

Sun, 14 Jul 2002 23:00:00 PST

Response to BugTraq - Weak Cisco PIX Enable Password Encryption Algorithm

Thu, 20 Jun 2002 23:00:00 PST

Response to BugTraq - Cisco Secure ACS Cross Site Scripting Issue

Thu, 20 Jun 2002 23:00:00 PST

Response to BugTraq - Cisco IOS Software - Three Possible DoS Attacks

Wed, 05 Jun 2002 23:00:00 PST

Response to BugTraq - Cisco IOS Software and ICMP Redirect Issue

Mon, 20 May 2002 23:00:00 PST

CDP Issue

Mon, 08 Oct 2001 23:00:00 PST

Response to BugTraq - HSRP Issues

Tue, 15 May 2001 23:00:00 PST

Response to BugTraq - NTP Issue

Wed, 11 Apr 2001 23:00:00 PST

Response to BugTraq - PIX Security Notes

Wed, 14 Mar 2001 23:00:00 PST

Response to BugTraq - Catalyst 3500 Issue

Sun, 12 Nov 2000 23:00:00 PST

Response to BugTraq - TACACS Vulnerability

Mon, 29 May 2000 23:00:00 PST

Response to BugTraq - show Command Vulnerability

Mon, 08 May 2000 23:00:00 PST