Vulnerabilities (CVE)

Filtered by vendor Cisco Subscribe

Filtered by product Ciscoworks Common Management Foundation

Total 6 CVE

CVE	Vendors	Products	Updated	CVSS v2	CVSS v3
CVE-2005-0356	9 Alaxala, Cisco, F5 and 6 more	76 Alaxala Networks, Agent Desktop, Aironet Ap1200 and 73 more	2024-11-20	5.0 MEDIUM	N/A
Multiple TCP implementations with Protection Against Wrapped Sequence Numbers (PAWS) with the timestamps option enabled allow remote attackers to cause a denial of service (connection loss) via a spoofed packet with a large timer value, which causes the host to discard later packets because they appear to be too old.
CVE-2004-0112	24 4d, Apple, Avaya and 21 more	65 Webstar, Mac Os X, Mac Os X Server and 62 more	2024-11-20	5.0 MEDIUM	N/A
The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check the length of Kerberos tickets during a handshake, which allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that causes an out-of-bounds read.
CVE-2004-0081	23 4d, Apple, Avaya and 20 more	66 Webstar, Mac Os X, Mac Os X Server and 63 more	2024-11-20	5.0 MEDIUM	N/A
OpenSSL 0.9.6 before 0.9.6d does not properly handle unknown message types, which allows remote attackers to cause a denial of service (infinite loop), as demonstrated using the Codenomicon TLS Test Tool.
CVE-2004-0079	23 4d, Apple, Avaya and 20 more	66 Webstar, Mac Os X, Mac Os X Server and 63 more	2024-11-20	5.0 MEDIUM	7.5 HIGH
The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that triggers a null dereference.
CVE-2003-0732	1 Cisco	4 Ciscoworks Cd1, Ciscoworks Common Management Foundation, Resource Manager and 1 more	2024-11-20	10.0 HIGH	N/A
CiscoWorks Common Management Foundation (CMF) 2.1 and earlier allows the guest user to obtain restricted information and possibly gain administrative privileges by changing the "guest" user to the Admin user on the Modify or delete users pages.
CVE-2003-0731	1 Cisco	4 Ciscoworks Cd1, Ciscoworks Common Management Foundation, Resource Manager and 1 more	2024-11-20	10.0 HIGH	N/A
CiscoWorks Common Management Foundation (CMF) 2.1 and earlier allows the guest user to gain administrative privileges via a certain POST request to com.cisco.nm.cmf.servlet.CsAuthServlet, possibly involving the "cmd" parameter with a modifyUser value and a modified "priviledges" parameter.