Cisco ONS 15327 before 4.1(3), ONS 15454 before 4.6(1), ONS 15454 SD before 4.1(3), and Cisco ONS 15600 before 1.3(0) enable TFTP service on UDP port 69 by default, which allows remote attackers to GET or PUT ONS system files on the current active TCC in the /flash0 or /flash1 directories.
References
| Link | Resource |
|---|---|
| http://www.cisco.com/warp/public/707/cisco-sa-20040219-ONS.shtml | Patch Vendor Advisory |
| http://www.securityfocus.com/bid/9699 | Patch Vendor Advisory |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/15264 | |
| http://www.cisco.com/warp/public/707/cisco-sa-20040219-ONS.shtml | Patch Vendor Advisory |
| http://www.securityfocus.com/bid/9699 | Patch Vendor Advisory |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/15264 |
Configurations
Configuration 1 (hide)
|
History
20 Nov 2024, 23:48
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://www.cisco.com/warp/public/707/cisco-sa-20040219-ONS.shtml - Patch, Vendor Advisory | |
| References | () http://www.securityfocus.com/bid/9699 - Patch, Vendor Advisory | |
| References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/15264 - |
Information
Published : 2004-11-23 05:00
Updated : 2024-11-20 23:48
NVD link : CVE-2004-0306
Mitre link : CVE-2004-0306
CVE.ORG link : CVE-2004-0306
JSON object : View
Products Affected
cisco
- optical_networking_systems_software
CWE