Search criteria

12 vulnerabilities found for ons_15600 by cisco

FKIE_CVE-2008-3818

Vulnerability from fkie_nvd - Published: 2009-01-16 21:30 - Updated: 2025-04-09 00:30
Severity ?
Summary
Cisco ONS 15310-CL, 15310-MA, 15327, 15454, 15454 SDH, and 15600 with software 7.0.2 through 7.0.6, 7.2.2, 8.0.x, 8.5.1, and 8.5.2 allows remote attackers to cause a denial of service (control-card reset) via a crafted TCP session.
References
psirt@cisco.comhttp://securitytracker.com/id?1021592
psirt@cisco.comhttp://www.cisco.com/en/US/products/products_security_advisory09186a0080a5c4fa.shtmlVendor Advisory
psirt@cisco.comhttp://www.securityfocus.com/bid/33261
psirt@cisco.comhttp://www.vupen.com/english/advisories/2009/0139
psirt@cisco.comhttps://exchange.xforce.ibmcloud.com/vulnerabilities/47940
af854a3a-2127-422b-91ae-364da2661108http://securitytracker.com/id?1021592
af854a3a-2127-422b-91ae-364da2661108http://www.cisco.com/en/US/products/products_security_advisory09186a0080a5c4fa.shtmlVendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/33261
af854a3a-2127-422b-91ae-364da2661108http://www.vupen.com/english/advisories/2009/0139
af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/47940
Impacted products
Vendor Product Version
cisco ons 7.0.2
cisco ons 7.0.4
cisco ons 7.0.5
cisco ons 7.2.0
cisco ons 7.2.2
cisco ons 8.0
cisco ons 8.5.0
cisco ons 8.5.1
cisco ons 8.5.2
cisco ons_15310-cl *
cisco ons_15310-ma *
cisco ons_15327 *
cisco ons_15454 *
cisco ons_15454sdh *
cisco ons_15600 *
To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:cisco:ons:7.0.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "1A4A568B-304B-4523-9441-1179D372BA83",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:ons:7.0.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "5DCC483E-B58E-403C-8080-FB0B0DCB777F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:ons:7.0.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "37416556-05E2-48F8-ABED-038459B0FBA5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:ons:7.2.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "6D2E8DD7-5086-4073-990B-5F5D92FAEF33",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:ons:7.2.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "1449B3C0-A485-4E8A-8337-64C1E85596E6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:ons:8.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "682C2AF5-EB85-437B-A147-5CB92610A8C3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:ons:8.5.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "49A99E5A-6190-458F-9191-5CEA774F121C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:ons:8.5.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "3EE6182B-2A77-47B1-AB8A-8E12C2CD905E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:ons:8.5.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "62992D9B-8D46-436A-B115-F7B687A24776",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:cisco:ons_15310-cl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "67D1F3C9-85A5-44F9-8198-28FFDF87A3C0",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:cisco:ons_15310-ma:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "3769407E-D311-45DF-86D7-46098F5B6C36",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:cisco:ons_15327:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "6F98E52B-161E-41B7-BCFD-EA6E53FA23B4",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:cisco:ons_15454:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "054BA906-B607-4A65-A6E3-D3D7F8096235",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:cisco:ons_15454sdh:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "8FE53BD6-BE23-40A5-BE4E-62B3088EC8B8",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:cisco:ons_15600:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "811149AD-89DC-4D93-A598-F6318C9EA64B",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Cisco ONS 15310-CL, 15310-MA, 15327, 15454, 15454 SDH, and 15600 with software 7.0.2 through 7.0.6, 7.2.2, 8.0.x, 8.5.1, and 8.5.2 allows remote attackers to cause a denial of service (control-card reset) via a crafted TCP session."
    },
    {
      "lang": "es",
      "value": "Cisco ONS 15310-CL, 15310-MA, 15327, 15454, 15454 SDH, y 15600 con software v7.0.2 hasta v7.0.6, v7.2.2, v8.0.x, v8.5.1, y v8.5.2 permite a atacantes remotos causar una denegaci\u00f3n de servicio (reinicio de tarjeta de control) mediante una sesi\u00f3n TCP manipulada."
    }
  ],
  "id": "CVE-2008-3818",
  "lastModified": "2025-04-09T00:30:58.490",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "COMPLETE",
          "baseScore": 7.8,
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 6.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2009-01-16T21:30:00.187",
  "references": [
    {
      "source": "psirt@cisco.com",
      "url": "http://securitytracker.com/id?1021592"
    },
    {
      "source": "psirt@cisco.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.cisco.com/en/US/products/products_security_advisory09186a0080a5c4fa.shtml"
    },
    {
      "source": "psirt@cisco.com",
      "url": "http://www.securityfocus.com/bid/33261"
    },
    {
      "source": "psirt@cisco.com",
      "url": "http://www.vupen.com/english/advisories/2009/0139"
    },
    {
      "source": "psirt@cisco.com",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/47940"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://securitytracker.com/id?1021592"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.cisco.com/en/US/products/products_security_advisory09186a0080a5c4fa.shtml"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/33261"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.vupen.com/english/advisories/2009/0139"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/47940"
    }
  ],
  "sourceIdentifier": "psirt@cisco.com",
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-20"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

FKIE_CVE-2006-1671

Vulnerability from fkie_nvd - Published: 2006-04-07 10:04 - Updated: 2025-04-03 01:03
Severity ?
Summary
Control cards for Cisco Optical Networking System (ONS) 15000 series nodes before 20060405 allow remote attackers to cause a denial of service (card reset) via (1) a "crafted" IP packet to a device with secure mode EMS-to-network-element access, aka bug ID CSCsc51390; (2) a "crafted" IP packet to a device with IP on the LAN interface, aka bug ID CSCsd04168; and (3) a "malformed" OSPF packet, aka bug ID CSCsc54558.
References
cve@mitre.orghttp://secunia.com/advisories/19553
cve@mitre.orghttp://securitytracker.com/id?1015872
cve@mitre.orghttp://www.cisco.com/warp/public/707/cisco-sa-20060405-ons.shtml
cve@mitre.orghttp://www.osvdb.org/24435
cve@mitre.orghttp://www.osvdb.org/24436
cve@mitre.orghttp://www.osvdb.org/24437
cve@mitre.orghttp://www.securityfocus.com/bid/17384
cve@mitre.orghttp://www.vupen.com/english/advisories/2006/1256
cve@mitre.orghttps://exchange.xforce.ibmcloud.com/vulnerabilities/25644
cve@mitre.orghttps://exchange.xforce.ibmcloud.com/vulnerabilities/25645
cve@mitre.orghttps://exchange.xforce.ibmcloud.com/vulnerabilities/25646
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/19553
af854a3a-2127-422b-91ae-364da2661108http://securitytracker.com/id?1015872
af854a3a-2127-422b-91ae-364da2661108http://www.cisco.com/warp/public/707/cisco-sa-20060405-ons.shtml
af854a3a-2127-422b-91ae-364da2661108http://www.osvdb.org/24435
af854a3a-2127-422b-91ae-364da2661108http://www.osvdb.org/24436
af854a3a-2127-422b-91ae-364da2661108http://www.osvdb.org/24437
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/17384
af854a3a-2127-422b-91ae-364da2661108http://www.vupen.com/english/advisories/2006/1256
af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/25644
af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/25645
af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/25646
Impacted products
Vendor Product Version
cisco transport_controller 4.0.x
cisco optical_networking_systems_software 1.0
cisco optical_networking_systems_software 1.1
cisco optical_networking_systems_software 1.1\(0\)
cisco optical_networking_systems_software 1.1\(1\)
cisco optical_networking_systems_software 1.3\(0\)
cisco optical_networking_systems_software 3.0
cisco optical_networking_systems_software 3.1.0
cisco optical_networking_systems_software 3.2
cisco optical_networking_systems_software 3.3.0
cisco optical_networking_systems_software 3.4.0
cisco optical_networking_systems_software 4.0\(1\)
cisco optical_networking_systems_software 4.0\(2\)
cisco optical_networking_systems_software 4.0.0
cisco optical_networking_systems_software 4.1\(0\)
cisco optical_networking_systems_software 4.1\(1\)
cisco optical_networking_systems_software 4.1\(2\)
cisco optical_networking_systems_software 4.1\(3\)
cisco optical_networking_systems_software 4.1.4
cisco optical_networking_systems_software 4.6\(0\)
cisco optical_networking_systems_software 4.6\(1\)
cisco ons_15310-cl_series 0
cisco ons_15600 0
cisco ons_15454_mspp *
To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:cisco:transport_controller:4.0.x:*:*:*:*:*:*:*",
              "matchCriteriaId": "A5F7F982-4359-4107-843C-E54CDA4A9E89",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:cisco:optical_networking_systems_software:1.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "4D1888FF-6126-4F40-A7EA-1ED5123FA729",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:optical_networking_systems_software:1.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "15B6D45F-25A7-4055-9D9C-42DEACBFFE17",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:optical_networking_systems_software:1.1\\(0\\):*:*:*:*:*:*:*",
              "matchCriteriaId": "31461FAA-2F90-47B0-BDA3-D81A8186960C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:optical_networking_systems_software:1.1\\(1\\):*:*:*:*:*:*:*",
              "matchCriteriaId": "2EF8D104-CABD-4036-A4AF-68B80D83AE34",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:optical_networking_systems_software:1.3\\(0\\):*:*:*:*:*:*:*",
              "matchCriteriaId": "5331AAD2-7E21-4407-9DF7-9D2A8058FAE0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:optical_networking_systems_software:3.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "8B0A4FA3-45F4-47B7-BA5B-6AEC8DB14C9E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:optical_networking_systems_software:3.1.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "6509622E-7E8D-4238-92F2-7DB88A3DB4DA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:optical_networking_systems_software:3.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "80460930-7D3D-4315-8D00-FFDCDBA69477",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:optical_networking_systems_software:3.3.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "0993B9A9-599B-4662-AEC2-EC771BCE8200",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:optical_networking_systems_software:3.4.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "04472ED2-EB97-47E1-938E-D69C363E81C4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:optical_networking_systems_software:4.0\\(1\\):*:*:*:*:*:*:*",
              "matchCriteriaId": "10988AA9-A807-4E70-8197-6F9EFC13AE86",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:optical_networking_systems_software:4.0\\(2\\):*:*:*:*:*:*:*",
              "matchCriteriaId": "C8951276-CDEF-4F54-93DF-B96DB10E6530",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:optical_networking_systems_software:4.0.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "5D886A75-5A73-4B1C-8B2A-45D589267B37",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:optical_networking_systems_software:4.1\\(0\\):*:*:*:*:*:*:*",
              "matchCriteriaId": "D5A594C2-98BB-4AC5-9CC5-89FE97D63323",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:optical_networking_systems_software:4.1\\(1\\):*:*:*:*:*:*:*",
              "matchCriteriaId": "9B35325A-98F6-41DF-ADD8-91ED992A3ED3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:optical_networking_systems_software:4.1\\(2\\):*:*:*:*:*:*:*",
              "matchCriteriaId": "F0B06C5B-73C2-47F1-9ED6-B59F9C1C5AF1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:optical_networking_systems_software:4.1\\(3\\):*:*:*:*:*:*:*",
              "matchCriteriaId": "D9758019-F6EA-4552-B070-5A9EBE73BB86",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:optical_networking_systems_software:4.1.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "44DDAC96-7467-4FFF-B337-C0475B7214B0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:optical_networking_systems_software:4.6\\(0\\):*:*:*:*:*:*:*",
              "matchCriteriaId": "4DEC7814-61D4-420A-AB81-6720F3C2D6B9",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:optical_networking_systems_software:4.6\\(1\\):*:*:*:*:*:*:*",
              "matchCriteriaId": "413133A5-F600-4B2B-82E1-3EAC10B7E6F9",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:h:cisco:ons_15310-cl_series:0:*:*:*:*:*:*:*",
              "matchCriteriaId": "727F672F-6227-4DF3-86A7-A259F97EB92E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:h:cisco:ons_15600:0:*:*:*:*:*:*:*",
              "matchCriteriaId": "D6E7CD66-ADA5-4397-9A59-E5C6B51B8A2F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ons_15454_mspp:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "B0E3A7E4-39CD-44B9-B72D-0C9B810A2158",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Control cards for Cisco Optical Networking System (ONS) 15000 series nodes before 20060405 allow remote attackers to cause a denial of service (card reset) via (1) a \"crafted\" IP packet to a device with secure mode EMS-to-network-element access, aka bug ID CSCsc51390; (2) a \"crafted\" IP packet to a device with IP on the LAN interface, aka bug ID CSCsd04168; and (3) a \"malformed\" OSPF packet, aka bug ID CSCsc54558."
    }
  ],
  "evaluatorSolution": "The vendor has released fixes to address these issues.",
  "id": "CVE-2006-1671",
  "lastModified": "2025-04-03T01:03:51.193",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 5.0,
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 2.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2006-04-07T10:04:00.000",
  "references": [
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/19553"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://securitytracker.com/id?1015872"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.cisco.com/warp/public/707/cisco-sa-20060405-ons.shtml"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.osvdb.org/24435"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.osvdb.org/24436"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.osvdb.org/24437"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/bid/17384"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.vupen.com/english/advisories/2006/1256"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25644"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25645"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25646"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/19553"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://securitytracker.com/id?1015872"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.cisco.com/warp/public/707/cisco-sa-20060405-ons.shtml"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.osvdb.org/24435"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.osvdb.org/24436"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.osvdb.org/24437"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/17384"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.vupen.com/english/advisories/2006/1256"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25644"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25645"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25646"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

FKIE_CVE-2006-1672

Vulnerability from fkie_nvd - Published: 2006-04-07 10:04 - Updated: 2025-04-03 01:03
Severity ?
Summary
The installation of Cisco Transport Controller (CTC) for Cisco Optical Networking System (ONS) 15000 series nodes adds a Java policy file entry with a wildcard that grants the java.security.AllPermission permission to any http URL containing "fs/LAUNCHER.jar", which allows remote attackers to execute arbitrary code on a CTC workstation, aka bug ID CSCea25049.
References
cve@mitre.orghttp://secunia.com/advisories/19553
cve@mitre.orghttp://securitytracker.com/id?1015871
cve@mitre.orghttp://www.cisco.com/warp/public/707/cisco-sa-20060405-ons.shtml
cve@mitre.orghttp://www.osvdb.org/24438
cve@mitre.orghttp://www.securityfocus.com/bid/17384
cve@mitre.orghttp://www.vupen.com/english/advisories/2006/1256
cve@mitre.orghttps://exchange.xforce.ibmcloud.com/vulnerabilities/25647
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/19553
af854a3a-2127-422b-91ae-364da2661108http://securitytracker.com/id?1015871
af854a3a-2127-422b-91ae-364da2661108http://www.cisco.com/warp/public/707/cisco-sa-20060405-ons.shtml
af854a3a-2127-422b-91ae-364da2661108http://www.osvdb.org/24438
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/17384
af854a3a-2127-422b-91ae-364da2661108http://www.vupen.com/english/advisories/2006/1256
af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/25647
Impacted products
Vendor Product Version
cisco transport_controller 4.0.x
cisco optical_networking_systems_software 1.0
cisco optical_networking_systems_software 1.1
cisco optical_networking_systems_software 1.1\(0\)
cisco optical_networking_systems_software 1.1\(1\)
cisco optical_networking_systems_software 1.3\(0\)
cisco optical_networking_systems_software 3.0
cisco optical_networking_systems_software 3.1.0
cisco optical_networking_systems_software 3.2
cisco optical_networking_systems_software 3.3.0
cisco optical_networking_systems_software 3.4.0
cisco optical_networking_systems_software 4.0\(1\)
cisco optical_networking_systems_software 4.0\(2\)
cisco optical_networking_systems_software 4.0.0
cisco optical_networking_systems_software 4.1\(0\)
cisco optical_networking_systems_software 4.1\(1\)
cisco optical_networking_systems_software 4.1\(2\)
cisco optical_networking_systems_software 4.1\(3\)
cisco optical_networking_systems_software 4.1.4
cisco optical_networking_systems_software 4.6\(0\)
cisco optical_networking_systems_software 4.6\(1\)
cisco ons_15310-cl_series 0
cisco ons_15600 0
cisco ons_15454_mspp *
To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:cisco:transport_controller:4.0.x:*:*:*:*:*:*:*",
              "matchCriteriaId": "A5F7F982-4359-4107-843C-E54CDA4A9E89",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:cisco:optical_networking_systems_software:1.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "4D1888FF-6126-4F40-A7EA-1ED5123FA729",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:optical_networking_systems_software:1.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "15B6D45F-25A7-4055-9D9C-42DEACBFFE17",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:optical_networking_systems_software:1.1\\(0\\):*:*:*:*:*:*:*",
              "matchCriteriaId": "31461FAA-2F90-47B0-BDA3-D81A8186960C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:optical_networking_systems_software:1.1\\(1\\):*:*:*:*:*:*:*",
              "matchCriteriaId": "2EF8D104-CABD-4036-A4AF-68B80D83AE34",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:optical_networking_systems_software:1.3\\(0\\):*:*:*:*:*:*:*",
              "matchCriteriaId": "5331AAD2-7E21-4407-9DF7-9D2A8058FAE0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:optical_networking_systems_software:3.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "8B0A4FA3-45F4-47B7-BA5B-6AEC8DB14C9E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:optical_networking_systems_software:3.1.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "6509622E-7E8D-4238-92F2-7DB88A3DB4DA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:optical_networking_systems_software:3.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "80460930-7D3D-4315-8D00-FFDCDBA69477",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:optical_networking_systems_software:3.3.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "0993B9A9-599B-4662-AEC2-EC771BCE8200",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:optical_networking_systems_software:3.4.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "04472ED2-EB97-47E1-938E-D69C363E81C4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:optical_networking_systems_software:4.0\\(1\\):*:*:*:*:*:*:*",
              "matchCriteriaId": "10988AA9-A807-4E70-8197-6F9EFC13AE86",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:optical_networking_systems_software:4.0\\(2\\):*:*:*:*:*:*:*",
              "matchCriteriaId": "C8951276-CDEF-4F54-93DF-B96DB10E6530",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:optical_networking_systems_software:4.0.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "5D886A75-5A73-4B1C-8B2A-45D589267B37",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:optical_networking_systems_software:4.1\\(0\\):*:*:*:*:*:*:*",
              "matchCriteriaId": "D5A594C2-98BB-4AC5-9CC5-89FE97D63323",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:optical_networking_systems_software:4.1\\(1\\):*:*:*:*:*:*:*",
              "matchCriteriaId": "9B35325A-98F6-41DF-ADD8-91ED992A3ED3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:optical_networking_systems_software:4.1\\(2\\):*:*:*:*:*:*:*",
              "matchCriteriaId": "F0B06C5B-73C2-47F1-9ED6-B59F9C1C5AF1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:optical_networking_systems_software:4.1\\(3\\):*:*:*:*:*:*:*",
              "matchCriteriaId": "D9758019-F6EA-4552-B070-5A9EBE73BB86",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:optical_networking_systems_software:4.1.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "44DDAC96-7467-4FFF-B337-C0475B7214B0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:optical_networking_systems_software:4.6\\(0\\):*:*:*:*:*:*:*",
              "matchCriteriaId": "4DEC7814-61D4-420A-AB81-6720F3C2D6B9",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:optical_networking_systems_software:4.6\\(1\\):*:*:*:*:*:*:*",
              "matchCriteriaId": "413133A5-F600-4B2B-82E1-3EAC10B7E6F9",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:h:cisco:ons_15310-cl_series:0:*:*:*:*:*:*:*",
              "matchCriteriaId": "727F672F-6227-4DF3-86A7-A259F97EB92E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:h:cisco:ons_15600:0:*:*:*:*:*:*:*",
              "matchCriteriaId": "D6E7CD66-ADA5-4397-9A59-E5C6B51B8A2F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ons_15454_mspp:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "B0E3A7E4-39CD-44B9-B72D-0C9B810A2158",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "The installation of Cisco Transport Controller (CTC) for Cisco Optical Networking System (ONS) 15000 series nodes adds a Java policy file entry with a wildcard that grants the java.security.AllPermission permission to any http URL containing \"fs/LAUNCHER.jar\", which allows remote attackers to execute arbitrary code on a CTC workstation, aka bug ID CSCea25049."
    }
  ],
  "id": "CVE-2006-1672",
  "lastModified": "2025-04-03T01:03:51.193",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 7.5,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 6.4,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": true,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2006-04-07T10:04:00.000",
  "references": [
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/19553"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://securitytracker.com/id?1015871"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.cisco.com/warp/public/707/cisco-sa-20060405-ons.shtml"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.osvdb.org/24438"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/bid/17384"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.vupen.com/english/advisories/2006/1256"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25647"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/19553"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://securitytracker.com/id?1015871"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.cisco.com/warp/public/707/cisco-sa-20060405-ons.shtml"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.osvdb.org/24438"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/17384"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.vupen.com/english/advisories/2006/1256"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25647"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

FKIE_CVE-2006-1670

Vulnerability from fkie_nvd - Published: 2006-04-07 10:04 - Updated: 2025-04-03 01:03
Severity ?
Summary
Control cards for Cisco Optical Networking System (ONS) 15000 series nodes before 20060405 allow remote attackers to cause a denial of service (memory exhaustion and possibly card reset) by sending an invalid response when the final ACK is expected, aka bug ID CSCei45910.
References
cve@mitre.orghttp://secunia.com/advisories/19553
cve@mitre.orghttp://securitytracker.com/id?1015872
cve@mitre.orghttp://www.cisco.com/warp/public/707/cisco-sa-20060405-ons.shtmlExploit, Patch, Vendor Advisory
cve@mitre.orghttp://www.osvdb.org/24434
cve@mitre.orghttp://www.securityfocus.com/bid/17384Exploit, Patch
cve@mitre.orghttp://www.vupen.com/english/advisories/2006/1256
cve@mitre.orghttps://exchange.xforce.ibmcloud.com/vulnerabilities/25643
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/19553
af854a3a-2127-422b-91ae-364da2661108http://securitytracker.com/id?1015872
af854a3a-2127-422b-91ae-364da2661108http://www.cisco.com/warp/public/707/cisco-sa-20060405-ons.shtmlExploit, Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://www.osvdb.org/24434
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/17384Exploit, Patch
af854a3a-2127-422b-91ae-364da2661108http://www.vupen.com/english/advisories/2006/1256
af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/25643
Impacted products
Vendor Product Version
cisco optical_networking_systems_software 1.0
cisco optical_networking_systems_software 1.1
cisco optical_networking_systems_software 1.1\(0\)
cisco optical_networking_systems_software 1.1\(1\)
cisco optical_networking_systems_software 1.3\(0\)
cisco optical_networking_systems_software 3.0
cisco optical_networking_systems_software 3.1.0
cisco optical_networking_systems_software 3.2
cisco optical_networking_systems_software 3.3.0
cisco optical_networking_systems_software 3.4.0
cisco optical_networking_systems_software 4.0\(1\)
cisco optical_networking_systems_software 4.0\(2\)
cisco optical_networking_systems_software 4.0.0
cisco optical_networking_systems_software 4.1\(0\)
cisco optical_networking_systems_software 4.1\(1\)
cisco optical_networking_systems_software 4.1\(2\)
cisco optical_networking_systems_software 4.1\(3\)
cisco optical_networking_systems_software 4.1.4
cisco optical_networking_systems_software 4.6\(0\)
cisco optical_networking_systems_software 4.6\(1\)
cisco ons_15310-cl_series *
cisco ons_15600 *
cisco ons_15454_mspp *
cisco ons_15454_mstp *
To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:cisco:optical_networking_systems_software:1.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "4D1888FF-6126-4F40-A7EA-1ED5123FA729",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:optical_networking_systems_software:1.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "15B6D45F-25A7-4055-9D9C-42DEACBFFE17",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:optical_networking_systems_software:1.1\\(0\\):*:*:*:*:*:*:*",
              "matchCriteriaId": "31461FAA-2F90-47B0-BDA3-D81A8186960C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:optical_networking_systems_software:1.1\\(1\\):*:*:*:*:*:*:*",
              "matchCriteriaId": "2EF8D104-CABD-4036-A4AF-68B80D83AE34",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:optical_networking_systems_software:1.3\\(0\\):*:*:*:*:*:*:*",
              "matchCriteriaId": "5331AAD2-7E21-4407-9DF7-9D2A8058FAE0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:optical_networking_systems_software:3.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "8B0A4FA3-45F4-47B7-BA5B-6AEC8DB14C9E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:optical_networking_systems_software:3.1.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "6509622E-7E8D-4238-92F2-7DB88A3DB4DA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:optical_networking_systems_software:3.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "80460930-7D3D-4315-8D00-FFDCDBA69477",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:optical_networking_systems_software:3.3.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "0993B9A9-599B-4662-AEC2-EC771BCE8200",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:optical_networking_systems_software:3.4.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "04472ED2-EB97-47E1-938E-D69C363E81C4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:optical_networking_systems_software:4.0\\(1\\):*:*:*:*:*:*:*",
              "matchCriteriaId": "10988AA9-A807-4E70-8197-6F9EFC13AE86",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:optical_networking_systems_software:4.0\\(2\\):*:*:*:*:*:*:*",
              "matchCriteriaId": "C8951276-CDEF-4F54-93DF-B96DB10E6530",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:optical_networking_systems_software:4.0.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "5D886A75-5A73-4B1C-8B2A-45D589267B37",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:optical_networking_systems_software:4.1\\(0\\):*:*:*:*:*:*:*",
              "matchCriteriaId": "D5A594C2-98BB-4AC5-9CC5-89FE97D63323",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:optical_networking_systems_software:4.1\\(1\\):*:*:*:*:*:*:*",
              "matchCriteriaId": "9B35325A-98F6-41DF-ADD8-91ED992A3ED3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:optical_networking_systems_software:4.1\\(2\\):*:*:*:*:*:*:*",
              "matchCriteriaId": "F0B06C5B-73C2-47F1-9ED6-B59F9C1C5AF1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:optical_networking_systems_software:4.1\\(3\\):*:*:*:*:*:*:*",
              "matchCriteriaId": "D9758019-F6EA-4552-B070-5A9EBE73BB86",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:optical_networking_systems_software:4.1.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "44DDAC96-7467-4FFF-B337-C0475B7214B0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:optical_networking_systems_software:4.6\\(0\\):*:*:*:*:*:*:*",
              "matchCriteriaId": "4DEC7814-61D4-420A-AB81-6720F3C2D6B9",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:optical_networking_systems_software:4.6\\(1\\):*:*:*:*:*:*:*",
              "matchCriteriaId": "413133A5-F600-4B2B-82E1-3EAC10B7E6F9",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:h:cisco:ons_15310-cl_series:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "32B96C9A-FA1D-4E74-95C2-4355ED257FB5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:h:cisco:ons_15600:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "811149AD-89DC-4D93-A598-F6318C9EA64B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ons_15454_mspp:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "B0E3A7E4-39CD-44B9-B72D-0C9B810A2158",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ons_15454_mstp:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "5B98B943-24D6-4B37-A44F-0E3985BBB54E",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Control cards for Cisco Optical Networking System (ONS) 15000 series nodes before 20060405 allow remote attackers to cause a denial of service (memory exhaustion and possibly card reset) by sending an invalid response when the final ACK is expected, aka bug ID CSCei45910."
    }
  ],
  "id": "CVE-2006-1670",
  "lastModified": "2025-04-03T01:03:51.193",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "COMPLETE",
          "baseScore": 7.8,
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 6.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2006-04-07T10:04:00.000",
  "references": [
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/19553"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://securitytracker.com/id?1015872"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Exploit",
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://www.cisco.com/warp/public/707/cisco-sa-20060405-ons.shtml"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.osvdb.org/24434"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Exploit",
        "Patch"
      ],
      "url": "http://www.securityfocus.com/bid/17384"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.vupen.com/english/advisories/2006/1256"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25643"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/19553"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://securitytracker.com/id?1015872"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Exploit",
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://www.cisco.com/warp/public/707/cisco-sa-20060405-ons.shtml"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.osvdb.org/24434"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Exploit",
        "Patch"
      ],
      "url": "http://www.securityfocus.com/bid/17384"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.vupen.com/english/advisories/2006/1256"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25643"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

CVE-2008-3818 (GCVE-0-2008-3818)

Vulnerability from cvelistv5 – Published: 2009-01-16 21:00 – Updated: 2024-08-07 09:53
VLAI?
Summary
Cisco ONS 15310-CL, 15310-MA, 15327, 15454, 15454 SDH, and 15600 with software 7.0.2 through 7.0.6, 7.2.2, 8.0.x, 8.5.1, and 8.5.2 allows remote attackers to cause a denial of service (control-card reset) via a crafted TCP session.
Severity ?
No CVSS data available.
CWE
  • n/a
Assigner
References
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T09:53:00.276Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "cisco-ons-controlcard-dos(47940)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/47940"
          },
          {
            "name": "ADV-2009-0139",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/0139"
          },
          {
            "name": "20090114 Cisco ONS Platform Crafted Packet Vulnerability",
            "tags": [
              "vendor-advisory",
              "x_refsource_CISCO",
              "x_transferred"
            ],
            "url": "http://www.cisco.com/en/US/products/products_security_advisory09186a0080a5c4fa.shtml"
          },
          {
            "name": "1021592",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1021592"
          },
          {
            "name": "33261",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/33261"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2009-01-14T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Cisco ONS 15310-CL, 15310-MA, 15327, 15454, 15454 SDH, and 15600 with software 7.0.2 through 7.0.6, 7.2.2, 8.0.x, 8.5.1, and 8.5.2 allows remote attackers to cause a denial of service (control-card reset) via a crafted TCP session."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-08-07T12:57:01",
        "orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
        "shortName": "cisco"
      },
      "references": [
        {
          "name": "cisco-ons-controlcard-dos(47940)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/47940"
        },
        {
          "name": "ADV-2009-0139",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/0139"
        },
        {
          "name": "20090114 Cisco ONS Platform Crafted Packet Vulnerability",
          "tags": [
            "vendor-advisory",
            "x_refsource_CISCO"
          ],
          "url": "http://www.cisco.com/en/US/products/products_security_advisory09186a0080a5c4fa.shtml"
        },
        {
          "name": "1021592",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1021592"
        },
        {
          "name": "33261",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/33261"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "psirt@cisco.com",
          "ID": "CVE-2008-3818",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Cisco ONS 15310-CL, 15310-MA, 15327, 15454, 15454 SDH, and 15600 with software 7.0.2 through 7.0.6, 7.2.2, 8.0.x, 8.5.1, and 8.5.2 allows remote attackers to cause a denial of service (control-card reset) via a crafted TCP session."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "cisco-ons-controlcard-dos(47940)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/47940"
            },
            {
              "name": "ADV-2009-0139",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2009/0139"
            },
            {
              "name": "20090114 Cisco ONS Platform Crafted Packet Vulnerability",
              "refsource": "CISCO",
              "url": "http://www.cisco.com/en/US/products/products_security_advisory09186a0080a5c4fa.shtml"
            },
            {
              "name": "1021592",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1021592"
            },
            {
              "name": "33261",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/33261"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
    "assignerShortName": "cisco",
    "cveId": "CVE-2008-3818",
    "datePublished": "2009-01-16T21:00:00",
    "dateReserved": "2008-08-27T00:00:00",
    "dateUpdated": "2024-08-07T09:53:00.276Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2006-1670 (GCVE-0-2006-1670)

Vulnerability from cvelistv5 – Published: 2006-04-07 10:00 – Updated: 2024-08-07 17:19
VLAI?
Summary
Control cards for Cisco Optical Networking System (ONS) 15000 series nodes before 20060405 allow remote attackers to cause a denial of service (memory exhaustion and possibly card reset) by sending an invalid response when the final ACK is expected, aka bug ID CSCei45910.
Severity ?
No CVSS data available.
CWE
  • n/a
Assigner
References
http://www.osvdb.org/24434 vdb-entryx_refsource_OSVDB
http://securitytracker.com/id?1015872 vdb-entryx_refsource_SECTRACK
http://www.vupen.com/english/advisories/2006/1256 vdb-entryx_refsource_VUPEN
http://secunia.com/advisories/19553 third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/bid/17384 vdb-entryx_refsource_BID
http://www.cisco.com/warp/public/707/cisco-sa-200… vendor-advisoryx_refsource_CISCO
https://exchange.xforce.ibmcloud.com/vulnerabilit… vdb-entryx_refsource_XF
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T17:19:49.448Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "24434",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://www.osvdb.org/24434"
          },
          {
            "name": "1015872",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1015872"
          },
          {
            "name": "ADV-2006-1256",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2006/1256"
          },
          {
            "name": "19553",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19553"
          },
          {
            "name": "17384",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/17384"
          },
          {
            "name": "20060405 Cisco Optical Networking System 15000 Series and Cisco Transport Controller Vulnerabilities",
            "tags": [
              "vendor-advisory",
              "x_refsource_CISCO",
              "x_transferred"
            ],
            "url": "http://www.cisco.com/warp/public/707/cisco-sa-20060405-ons.shtml"
          },
          {
            "name": "cisco-ons-iplan-ack-dos(25643)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25643"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2006-04-05T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Control cards for Cisco Optical Networking System (ONS) 15000 series nodes before 20060405 allow remote attackers to cause a denial of service (memory exhaustion and possibly card reset) by sending an invalid response when the final ACK is expected, aka bug ID CSCei45910."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-07-19T15:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "24434",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://www.osvdb.org/24434"
        },
        {
          "name": "1015872",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1015872"
        },
        {
          "name": "ADV-2006-1256",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2006/1256"
        },
        {
          "name": "19553",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19553"
        },
        {
          "name": "17384",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/17384"
        },
        {
          "name": "20060405 Cisco Optical Networking System 15000 Series and Cisco Transport Controller Vulnerabilities",
          "tags": [
            "vendor-advisory",
            "x_refsource_CISCO"
          ],
          "url": "http://www.cisco.com/warp/public/707/cisco-sa-20060405-ons.shtml"
        },
        {
          "name": "cisco-ons-iplan-ack-dos(25643)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25643"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2006-1670",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Control cards for Cisco Optical Networking System (ONS) 15000 series nodes before 20060405 allow remote attackers to cause a denial of service (memory exhaustion and possibly card reset) by sending an invalid response when the final ACK is expected, aka bug ID CSCei45910."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "24434",
              "refsource": "OSVDB",
              "url": "http://www.osvdb.org/24434"
            },
            {
              "name": "1015872",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1015872"
            },
            {
              "name": "ADV-2006-1256",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2006/1256"
            },
            {
              "name": "19553",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/19553"
            },
            {
              "name": "17384",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/17384"
            },
            {
              "name": "20060405 Cisco Optical Networking System 15000 Series and Cisco Transport Controller Vulnerabilities",
              "refsource": "CISCO",
              "url": "http://www.cisco.com/warp/public/707/cisco-sa-20060405-ons.shtml"
            },
            {
              "name": "cisco-ons-iplan-ack-dos(25643)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25643"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2006-1670",
    "datePublished": "2006-04-07T10:00:00",
    "dateReserved": "2006-04-07T00:00:00",
    "dateUpdated": "2024-08-07T17:19:49.448Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2006-1672 (GCVE-0-2006-1672)

Vulnerability from cvelistv5 – Published: 2006-04-07 10:00 – Updated: 2024-08-07 17:19
VLAI?
Summary
The installation of Cisco Transport Controller (CTC) for Cisco Optical Networking System (ONS) 15000 series nodes adds a Java policy file entry with a wildcard that grants the java.security.AllPermission permission to any http URL containing "fs/LAUNCHER.jar", which allows remote attackers to execute arbitrary code on a CTC workstation, aka bug ID CSCea25049.
Severity ?
No CVSS data available.
CWE
  • n/a
Assigner
References
http://www.vupen.com/english/advisories/2006/1256 vdb-entryx_refsource_VUPEN
http://www.osvdb.org/24438 vdb-entryx_refsource_OSVDB
http://secunia.com/advisories/19553 third-party-advisoryx_refsource_SECUNIA
https://exchange.xforce.ibmcloud.com/vulnerabilit… vdb-entryx_refsource_XF
http://www.securityfocus.com/bid/17384 vdb-entryx_refsource_BID
http://securitytracker.com/id?1015871 vdb-entryx_refsource_SECTRACK
http://www.cisco.com/warp/public/707/cisco-sa-200… vendor-advisoryx_refsource_CISCO
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T17:19:49.267Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "ADV-2006-1256",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2006/1256"
          },
          {
            "name": "24438",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://www.osvdb.org/24438"
          },
          {
            "name": "19553",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19553"
          },
          {
            "name": "cisco-ons-ctc-code-execution(25647)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25647"
          },
          {
            "name": "17384",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/17384"
          },
          {
            "name": "1015871",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1015871"
          },
          {
            "name": "20060405 Cisco Optical Networking System 15000 Series and Cisco Transport Controller Vulnerabilities",
            "tags": [
              "vendor-advisory",
              "x_refsource_CISCO",
              "x_transferred"
            ],
            "url": "http://www.cisco.com/warp/public/707/cisco-sa-20060405-ons.shtml"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2006-04-05T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The installation of Cisco Transport Controller (CTC) for Cisco Optical Networking System (ONS) 15000 series nodes adds a Java policy file entry with a wildcard that grants the java.security.AllPermission permission to any http URL containing \"fs/LAUNCHER.jar\", which allows remote attackers to execute arbitrary code on a CTC workstation, aka bug ID CSCea25049."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-07-19T15:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "ADV-2006-1256",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2006/1256"
        },
        {
          "name": "24438",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://www.osvdb.org/24438"
        },
        {
          "name": "19553",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19553"
        },
        {
          "name": "cisco-ons-ctc-code-execution(25647)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25647"
        },
        {
          "name": "17384",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/17384"
        },
        {
          "name": "1015871",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1015871"
        },
        {
          "name": "20060405 Cisco Optical Networking System 15000 Series and Cisco Transport Controller Vulnerabilities",
          "tags": [
            "vendor-advisory",
            "x_refsource_CISCO"
          ],
          "url": "http://www.cisco.com/warp/public/707/cisco-sa-20060405-ons.shtml"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2006-1672",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The installation of Cisco Transport Controller (CTC) for Cisco Optical Networking System (ONS) 15000 series nodes adds a Java policy file entry with a wildcard that grants the java.security.AllPermission permission to any http URL containing \"fs/LAUNCHER.jar\", which allows remote attackers to execute arbitrary code on a CTC workstation, aka bug ID CSCea25049."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "ADV-2006-1256",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2006/1256"
            },
            {
              "name": "24438",
              "refsource": "OSVDB",
              "url": "http://www.osvdb.org/24438"
            },
            {
              "name": "19553",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/19553"
            },
            {
              "name": "cisco-ons-ctc-code-execution(25647)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25647"
            },
            {
              "name": "17384",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/17384"
            },
            {
              "name": "1015871",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1015871"
            },
            {
              "name": "20060405 Cisco Optical Networking System 15000 Series and Cisco Transport Controller Vulnerabilities",
              "refsource": "CISCO",
              "url": "http://www.cisco.com/warp/public/707/cisco-sa-20060405-ons.shtml"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2006-1672",
    "datePublished": "2006-04-07T10:00:00",
    "dateReserved": "2006-04-07T00:00:00",
    "dateUpdated": "2024-08-07T17:19:49.267Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2006-1671 (GCVE-0-2006-1671)

Vulnerability from cvelistv5 – Published: 2006-04-07 10:00 – Updated: 2024-08-07 17:19
VLAI?
Summary
Control cards for Cisco Optical Networking System (ONS) 15000 series nodes before 20060405 allow remote attackers to cause a denial of service (card reset) via (1) a "crafted" IP packet to a device with secure mode EMS-to-network-element access, aka bug ID CSCsc51390; (2) a "crafted" IP packet to a device with IP on the LAN interface, aka bug ID CSCsd04168; and (3) a "malformed" OSPF packet, aka bug ID CSCsc54558.
Severity ?
No CVSS data available.
CWE
  • n/a
Assigner
References
http://www.osvdb.org/24435 vdb-entryx_refsource_OSVDB
http://securitytracker.com/id?1015872 vdb-entryx_refsource_SECTRACK
https://exchange.xforce.ibmcloud.com/vulnerabilit… vdb-entryx_refsource_XF
http://www.vupen.com/english/advisories/2006/1256 vdb-entryx_refsource_VUPEN
http://www.osvdb.org/24436 vdb-entryx_refsource_OSVDB
https://exchange.xforce.ibmcloud.com/vulnerabilit… vdb-entryx_refsource_XF
http://secunia.com/advisories/19553 third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/bid/17384 vdb-entryx_refsource_BID
http://www.cisco.com/warp/public/707/cisco-sa-200… vendor-advisoryx_refsource_CISCO
http://www.osvdb.org/24437 vdb-entryx_refsource_OSVDB
https://exchange.xforce.ibmcloud.com/vulnerabilit… vdb-entryx_refsource_XF
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T17:19:49.275Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "24435",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://www.osvdb.org/24435"
          },
          {
            "name": "1015872",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1015872"
          },
          {
            "name": "cisco-ons-cc-ems-dos(25644)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25644"
          },
          {
            "name": "ADV-2006-1256",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2006/1256"
          },
          {
            "name": "24436",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://www.osvdb.org/24436"
          },
          {
            "name": "cisco-ons-cc-ip-dos(25645)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25645"
          },
          {
            "name": "19553",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19553"
          },
          {
            "name": "17384",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/17384"
          },
          {
            "name": "20060405 Cisco Optical Networking System 15000 Series and Cisco Transport Controller Vulnerabilities",
            "tags": [
              "vendor-advisory",
              "x_refsource_CISCO",
              "x_transferred"
            ],
            "url": "http://www.cisco.com/warp/public/707/cisco-sa-20060405-ons.shtml"
          },
          {
            "name": "24437",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://www.osvdb.org/24437"
          },
          {
            "name": "cisco-ons-ospf-dos(25646)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25646"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2006-04-05T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Control cards for Cisco Optical Networking System (ONS) 15000 series nodes before 20060405 allow remote attackers to cause a denial of service (card reset) via (1) a \"crafted\" IP packet to a device with secure mode EMS-to-network-element access, aka bug ID CSCsc51390; (2) a \"crafted\" IP packet to a device with IP on the LAN interface, aka bug ID CSCsd04168; and (3) a \"malformed\" OSPF packet, aka bug ID CSCsc54558."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-07-19T15:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "24435",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://www.osvdb.org/24435"
        },
        {
          "name": "1015872",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1015872"
        },
        {
          "name": "cisco-ons-cc-ems-dos(25644)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25644"
        },
        {
          "name": "ADV-2006-1256",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2006/1256"
        },
        {
          "name": "24436",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://www.osvdb.org/24436"
        },
        {
          "name": "cisco-ons-cc-ip-dos(25645)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25645"
        },
        {
          "name": "19553",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19553"
        },
        {
          "name": "17384",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/17384"
        },
        {
          "name": "20060405 Cisco Optical Networking System 15000 Series and Cisco Transport Controller Vulnerabilities",
          "tags": [
            "vendor-advisory",
            "x_refsource_CISCO"
          ],
          "url": "http://www.cisco.com/warp/public/707/cisco-sa-20060405-ons.shtml"
        },
        {
          "name": "24437",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://www.osvdb.org/24437"
        },
        {
          "name": "cisco-ons-ospf-dos(25646)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25646"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2006-1671",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Control cards for Cisco Optical Networking System (ONS) 15000 series nodes before 20060405 allow remote attackers to cause a denial of service (card reset) via (1) a \"crafted\" IP packet to a device with secure mode EMS-to-network-element access, aka bug ID CSCsc51390; (2) a \"crafted\" IP packet to a device with IP on the LAN interface, aka bug ID CSCsd04168; and (3) a \"malformed\" OSPF packet, aka bug ID CSCsc54558."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "24435",
              "refsource": "OSVDB",
              "url": "http://www.osvdb.org/24435"
            },
            {
              "name": "1015872",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1015872"
            },
            {
              "name": "cisco-ons-cc-ems-dos(25644)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25644"
            },
            {
              "name": "ADV-2006-1256",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2006/1256"
            },
            {
              "name": "24436",
              "refsource": "OSVDB",
              "url": "http://www.osvdb.org/24436"
            },
            {
              "name": "cisco-ons-cc-ip-dos(25645)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25645"
            },
            {
              "name": "19553",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/19553"
            },
            {
              "name": "17384",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/17384"
            },
            {
              "name": "20060405 Cisco Optical Networking System 15000 Series and Cisco Transport Controller Vulnerabilities",
              "refsource": "CISCO",
              "url": "http://www.cisco.com/warp/public/707/cisco-sa-20060405-ons.shtml"
            },
            {
              "name": "24437",
              "refsource": "OSVDB",
              "url": "http://www.osvdb.org/24437"
            },
            {
              "name": "cisco-ons-ospf-dos(25646)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25646"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2006-1671",
    "datePublished": "2006-04-07T10:00:00",
    "dateReserved": "2006-04-07T00:00:00",
    "dateUpdated": "2024-08-07T17:19:49.275Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2008-3818 (GCVE-0-2008-3818)

Vulnerability from nvd – Published: 2009-01-16 21:00 – Updated: 2024-08-07 09:53
VLAI?
Summary
Cisco ONS 15310-CL, 15310-MA, 15327, 15454, 15454 SDH, and 15600 with software 7.0.2 through 7.0.6, 7.2.2, 8.0.x, 8.5.1, and 8.5.2 allows remote attackers to cause a denial of service (control-card reset) via a crafted TCP session.
Severity ?
No CVSS data available.
CWE
  • n/a
Assigner
References
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T09:53:00.276Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "cisco-ons-controlcard-dos(47940)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/47940"
          },
          {
            "name": "ADV-2009-0139",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/0139"
          },
          {
            "name": "20090114 Cisco ONS Platform Crafted Packet Vulnerability",
            "tags": [
              "vendor-advisory",
              "x_refsource_CISCO",
              "x_transferred"
            ],
            "url": "http://www.cisco.com/en/US/products/products_security_advisory09186a0080a5c4fa.shtml"
          },
          {
            "name": "1021592",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1021592"
          },
          {
            "name": "33261",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/33261"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2009-01-14T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Cisco ONS 15310-CL, 15310-MA, 15327, 15454, 15454 SDH, and 15600 with software 7.0.2 through 7.0.6, 7.2.2, 8.0.x, 8.5.1, and 8.5.2 allows remote attackers to cause a denial of service (control-card reset) via a crafted TCP session."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-08-07T12:57:01",
        "orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
        "shortName": "cisco"
      },
      "references": [
        {
          "name": "cisco-ons-controlcard-dos(47940)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/47940"
        },
        {
          "name": "ADV-2009-0139",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/0139"
        },
        {
          "name": "20090114 Cisco ONS Platform Crafted Packet Vulnerability",
          "tags": [
            "vendor-advisory",
            "x_refsource_CISCO"
          ],
          "url": "http://www.cisco.com/en/US/products/products_security_advisory09186a0080a5c4fa.shtml"
        },
        {
          "name": "1021592",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1021592"
        },
        {
          "name": "33261",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/33261"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "psirt@cisco.com",
          "ID": "CVE-2008-3818",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Cisco ONS 15310-CL, 15310-MA, 15327, 15454, 15454 SDH, and 15600 with software 7.0.2 through 7.0.6, 7.2.2, 8.0.x, 8.5.1, and 8.5.2 allows remote attackers to cause a denial of service (control-card reset) via a crafted TCP session."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "cisco-ons-controlcard-dos(47940)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/47940"
            },
            {
              "name": "ADV-2009-0139",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2009/0139"
            },
            {
              "name": "20090114 Cisco ONS Platform Crafted Packet Vulnerability",
              "refsource": "CISCO",
              "url": "http://www.cisco.com/en/US/products/products_security_advisory09186a0080a5c4fa.shtml"
            },
            {
              "name": "1021592",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1021592"
            },
            {
              "name": "33261",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/33261"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
    "assignerShortName": "cisco",
    "cveId": "CVE-2008-3818",
    "datePublished": "2009-01-16T21:00:00",
    "dateReserved": "2008-08-27T00:00:00",
    "dateUpdated": "2024-08-07T09:53:00.276Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2006-1670 (GCVE-0-2006-1670)

Vulnerability from nvd – Published: 2006-04-07 10:00 – Updated: 2024-08-07 17:19
VLAI?
Summary
Control cards for Cisco Optical Networking System (ONS) 15000 series nodes before 20060405 allow remote attackers to cause a denial of service (memory exhaustion and possibly card reset) by sending an invalid response when the final ACK is expected, aka bug ID CSCei45910.
Severity ?
No CVSS data available.
CWE
  • n/a
Assigner
References
http://www.osvdb.org/24434 vdb-entryx_refsource_OSVDB
http://securitytracker.com/id?1015872 vdb-entryx_refsource_SECTRACK
http://www.vupen.com/english/advisories/2006/1256 vdb-entryx_refsource_VUPEN
http://secunia.com/advisories/19553 third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/bid/17384 vdb-entryx_refsource_BID
http://www.cisco.com/warp/public/707/cisco-sa-200… vendor-advisoryx_refsource_CISCO
https://exchange.xforce.ibmcloud.com/vulnerabilit… vdb-entryx_refsource_XF
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T17:19:49.448Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "24434",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://www.osvdb.org/24434"
          },
          {
            "name": "1015872",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1015872"
          },
          {
            "name": "ADV-2006-1256",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2006/1256"
          },
          {
            "name": "19553",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19553"
          },
          {
            "name": "17384",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/17384"
          },
          {
            "name": "20060405 Cisco Optical Networking System 15000 Series and Cisco Transport Controller Vulnerabilities",
            "tags": [
              "vendor-advisory",
              "x_refsource_CISCO",
              "x_transferred"
            ],
            "url": "http://www.cisco.com/warp/public/707/cisco-sa-20060405-ons.shtml"
          },
          {
            "name": "cisco-ons-iplan-ack-dos(25643)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25643"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2006-04-05T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Control cards for Cisco Optical Networking System (ONS) 15000 series nodes before 20060405 allow remote attackers to cause a denial of service (memory exhaustion and possibly card reset) by sending an invalid response when the final ACK is expected, aka bug ID CSCei45910."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-07-19T15:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "24434",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://www.osvdb.org/24434"
        },
        {
          "name": "1015872",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1015872"
        },
        {
          "name": "ADV-2006-1256",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2006/1256"
        },
        {
          "name": "19553",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19553"
        },
        {
          "name": "17384",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/17384"
        },
        {
          "name": "20060405 Cisco Optical Networking System 15000 Series and Cisco Transport Controller Vulnerabilities",
          "tags": [
            "vendor-advisory",
            "x_refsource_CISCO"
          ],
          "url": "http://www.cisco.com/warp/public/707/cisco-sa-20060405-ons.shtml"
        },
        {
          "name": "cisco-ons-iplan-ack-dos(25643)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25643"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2006-1670",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Control cards for Cisco Optical Networking System (ONS) 15000 series nodes before 20060405 allow remote attackers to cause a denial of service (memory exhaustion and possibly card reset) by sending an invalid response when the final ACK is expected, aka bug ID CSCei45910."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "24434",
              "refsource": "OSVDB",
              "url": "http://www.osvdb.org/24434"
            },
            {
              "name": "1015872",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1015872"
            },
            {
              "name": "ADV-2006-1256",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2006/1256"
            },
            {
              "name": "19553",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/19553"
            },
            {
              "name": "17384",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/17384"
            },
            {
              "name": "20060405 Cisco Optical Networking System 15000 Series and Cisco Transport Controller Vulnerabilities",
              "refsource": "CISCO",
              "url": "http://www.cisco.com/warp/public/707/cisco-sa-20060405-ons.shtml"
            },
            {
              "name": "cisco-ons-iplan-ack-dos(25643)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25643"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2006-1670",
    "datePublished": "2006-04-07T10:00:00",
    "dateReserved": "2006-04-07T00:00:00",
    "dateUpdated": "2024-08-07T17:19:49.448Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2006-1672 (GCVE-0-2006-1672)

Vulnerability from nvd – Published: 2006-04-07 10:00 – Updated: 2024-08-07 17:19
VLAI?
Summary
The installation of Cisco Transport Controller (CTC) for Cisco Optical Networking System (ONS) 15000 series nodes adds a Java policy file entry with a wildcard that grants the java.security.AllPermission permission to any http URL containing "fs/LAUNCHER.jar", which allows remote attackers to execute arbitrary code on a CTC workstation, aka bug ID CSCea25049.
Severity ?
No CVSS data available.
CWE
  • n/a
Assigner
References
http://www.vupen.com/english/advisories/2006/1256 vdb-entryx_refsource_VUPEN
http://www.osvdb.org/24438 vdb-entryx_refsource_OSVDB
http://secunia.com/advisories/19553 third-party-advisoryx_refsource_SECUNIA
https://exchange.xforce.ibmcloud.com/vulnerabilit… vdb-entryx_refsource_XF
http://www.securityfocus.com/bid/17384 vdb-entryx_refsource_BID
http://securitytracker.com/id?1015871 vdb-entryx_refsource_SECTRACK
http://www.cisco.com/warp/public/707/cisco-sa-200… vendor-advisoryx_refsource_CISCO
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T17:19:49.267Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "ADV-2006-1256",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2006/1256"
          },
          {
            "name": "24438",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://www.osvdb.org/24438"
          },
          {
            "name": "19553",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19553"
          },
          {
            "name": "cisco-ons-ctc-code-execution(25647)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25647"
          },
          {
            "name": "17384",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/17384"
          },
          {
            "name": "1015871",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1015871"
          },
          {
            "name": "20060405 Cisco Optical Networking System 15000 Series and Cisco Transport Controller Vulnerabilities",
            "tags": [
              "vendor-advisory",
              "x_refsource_CISCO",
              "x_transferred"
            ],
            "url": "http://www.cisco.com/warp/public/707/cisco-sa-20060405-ons.shtml"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2006-04-05T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The installation of Cisco Transport Controller (CTC) for Cisco Optical Networking System (ONS) 15000 series nodes adds a Java policy file entry with a wildcard that grants the java.security.AllPermission permission to any http URL containing \"fs/LAUNCHER.jar\", which allows remote attackers to execute arbitrary code on a CTC workstation, aka bug ID CSCea25049."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-07-19T15:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "ADV-2006-1256",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2006/1256"
        },
        {
          "name": "24438",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://www.osvdb.org/24438"
        },
        {
          "name": "19553",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19553"
        },
        {
          "name": "cisco-ons-ctc-code-execution(25647)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25647"
        },
        {
          "name": "17384",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/17384"
        },
        {
          "name": "1015871",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1015871"
        },
        {
          "name": "20060405 Cisco Optical Networking System 15000 Series and Cisco Transport Controller Vulnerabilities",
          "tags": [
            "vendor-advisory",
            "x_refsource_CISCO"
          ],
          "url": "http://www.cisco.com/warp/public/707/cisco-sa-20060405-ons.shtml"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2006-1672",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The installation of Cisco Transport Controller (CTC) for Cisco Optical Networking System (ONS) 15000 series nodes adds a Java policy file entry with a wildcard that grants the java.security.AllPermission permission to any http URL containing \"fs/LAUNCHER.jar\", which allows remote attackers to execute arbitrary code on a CTC workstation, aka bug ID CSCea25049."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "ADV-2006-1256",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2006/1256"
            },
            {
              "name": "24438",
              "refsource": "OSVDB",
              "url": "http://www.osvdb.org/24438"
            },
            {
              "name": "19553",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/19553"
            },
            {
              "name": "cisco-ons-ctc-code-execution(25647)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25647"
            },
            {
              "name": "17384",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/17384"
            },
            {
              "name": "1015871",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1015871"
            },
            {
              "name": "20060405 Cisco Optical Networking System 15000 Series and Cisco Transport Controller Vulnerabilities",
              "refsource": "CISCO",
              "url": "http://www.cisco.com/warp/public/707/cisco-sa-20060405-ons.shtml"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2006-1672",
    "datePublished": "2006-04-07T10:00:00",
    "dateReserved": "2006-04-07T00:00:00",
    "dateUpdated": "2024-08-07T17:19:49.267Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2006-1671 (GCVE-0-2006-1671)

Vulnerability from nvd – Published: 2006-04-07 10:00 – Updated: 2024-08-07 17:19
VLAI?
Summary
Control cards for Cisco Optical Networking System (ONS) 15000 series nodes before 20060405 allow remote attackers to cause a denial of service (card reset) via (1) a "crafted" IP packet to a device with secure mode EMS-to-network-element access, aka bug ID CSCsc51390; (2) a "crafted" IP packet to a device with IP on the LAN interface, aka bug ID CSCsd04168; and (3) a "malformed" OSPF packet, aka bug ID CSCsc54558.
Severity ?
No CVSS data available.
CWE
  • n/a
Assigner
References
http://www.osvdb.org/24435 vdb-entryx_refsource_OSVDB
http://securitytracker.com/id?1015872 vdb-entryx_refsource_SECTRACK
https://exchange.xforce.ibmcloud.com/vulnerabilit… vdb-entryx_refsource_XF
http://www.vupen.com/english/advisories/2006/1256 vdb-entryx_refsource_VUPEN
http://www.osvdb.org/24436 vdb-entryx_refsource_OSVDB
https://exchange.xforce.ibmcloud.com/vulnerabilit… vdb-entryx_refsource_XF
http://secunia.com/advisories/19553 third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/bid/17384 vdb-entryx_refsource_BID
http://www.cisco.com/warp/public/707/cisco-sa-200… vendor-advisoryx_refsource_CISCO
http://www.osvdb.org/24437 vdb-entryx_refsource_OSVDB
https://exchange.xforce.ibmcloud.com/vulnerabilit… vdb-entryx_refsource_XF
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T17:19:49.275Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "24435",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://www.osvdb.org/24435"
          },
          {
            "name": "1015872",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1015872"
          },
          {
            "name": "cisco-ons-cc-ems-dos(25644)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25644"
          },
          {
            "name": "ADV-2006-1256",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2006/1256"
          },
          {
            "name": "24436",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://www.osvdb.org/24436"
          },
          {
            "name": "cisco-ons-cc-ip-dos(25645)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25645"
          },
          {
            "name": "19553",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19553"
          },
          {
            "name": "17384",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/17384"
          },
          {
            "name": "20060405 Cisco Optical Networking System 15000 Series and Cisco Transport Controller Vulnerabilities",
            "tags": [
              "vendor-advisory",
              "x_refsource_CISCO",
              "x_transferred"
            ],
            "url": "http://www.cisco.com/warp/public/707/cisco-sa-20060405-ons.shtml"
          },
          {
            "name": "24437",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://www.osvdb.org/24437"
          },
          {
            "name": "cisco-ons-ospf-dos(25646)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25646"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2006-04-05T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Control cards for Cisco Optical Networking System (ONS) 15000 series nodes before 20060405 allow remote attackers to cause a denial of service (card reset) via (1) a \"crafted\" IP packet to a device with secure mode EMS-to-network-element access, aka bug ID CSCsc51390; (2) a \"crafted\" IP packet to a device with IP on the LAN interface, aka bug ID CSCsd04168; and (3) a \"malformed\" OSPF packet, aka bug ID CSCsc54558."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-07-19T15:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "24435",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://www.osvdb.org/24435"
        },
        {
          "name": "1015872",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1015872"
        },
        {
          "name": "cisco-ons-cc-ems-dos(25644)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25644"
        },
        {
          "name": "ADV-2006-1256",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2006/1256"
        },
        {
          "name": "24436",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://www.osvdb.org/24436"
        },
        {
          "name": "cisco-ons-cc-ip-dos(25645)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25645"
        },
        {
          "name": "19553",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19553"
        },
        {
          "name": "17384",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/17384"
        },
        {
          "name": "20060405 Cisco Optical Networking System 15000 Series and Cisco Transport Controller Vulnerabilities",
          "tags": [
            "vendor-advisory",
            "x_refsource_CISCO"
          ],
          "url": "http://www.cisco.com/warp/public/707/cisco-sa-20060405-ons.shtml"
        },
        {
          "name": "24437",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://www.osvdb.org/24437"
        },
        {
          "name": "cisco-ons-ospf-dos(25646)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25646"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2006-1671",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Control cards for Cisco Optical Networking System (ONS) 15000 series nodes before 20060405 allow remote attackers to cause a denial of service (card reset) via (1) a \"crafted\" IP packet to a device with secure mode EMS-to-network-element access, aka bug ID CSCsc51390; (2) a \"crafted\" IP packet to a device with IP on the LAN interface, aka bug ID CSCsd04168; and (3) a \"malformed\" OSPF packet, aka bug ID CSCsc54558."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "24435",
              "refsource": "OSVDB",
              "url": "http://www.osvdb.org/24435"
            },
            {
              "name": "1015872",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1015872"
            },
            {
              "name": "cisco-ons-cc-ems-dos(25644)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25644"
            },
            {
              "name": "ADV-2006-1256",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2006/1256"
            },
            {
              "name": "24436",
              "refsource": "OSVDB",
              "url": "http://www.osvdb.org/24436"
            },
            {
              "name": "cisco-ons-cc-ip-dos(25645)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25645"
            },
            {
              "name": "19553",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/19553"
            },
            {
              "name": "17384",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/17384"
            },
            {
              "name": "20060405 Cisco Optical Networking System 15000 Series and Cisco Transport Controller Vulnerabilities",
              "refsource": "CISCO",
              "url": "http://www.cisco.com/warp/public/707/cisco-sa-20060405-ons.shtml"
            },
            {
              "name": "24437",
              "refsource": "OSVDB",
              "url": "http://www.osvdb.org/24437"
            },
            {
              "name": "cisco-ons-ospf-dos(25646)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25646"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2006-1671",
    "datePublished": "2006-04-07T10:00:00",
    "dateReserved": "2006-04-07T00:00:00",
    "dateUpdated": "2024-08-07T17:19:49.275Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}