Priority LOW 28
Cisco IP Phones 7902/7905/7912, ATA 186/188, Unity Express, ACNS, and Subscriber Edge Services Manager (SESM) allows remote attackers to cause a denial of service (crash or instability) via a compressed DNS packet with a…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.02444 · Published 2006-05-02 · No fix listed
Priority LOW 36
Cisco devices running Application and Content Networking System (ACNS) 4.x, 5.0, 5.1, or 5.2 use a default password when the setup dialog has not been run, which allows remote attackers to gain access.
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.0159 · Published 2005-03-01 · No fix listed
Priority LOW 26
Cisco devices running Application and Content Networking System (ACNS) 5.0, 5.1 before 5.1.13.7, or 5.2 before 5.2.3.9 allow remote attackers to cause a denial of service (bandwidth consumption) via "crafted IP packets"…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.01634 · Published 2005-03-01 · No fix listed
Priority LOW 26
Cisco devices running Application and Content Networking System (ACNS) 4.x, 5.0, or 5.1 before 5.1.11.6 allow remote attackers to cause a denial of service (CPU consumption) via malformed IP packets.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.01634 · Published 2005-03-01 · No fix listed
Priority LOW 29
The RealServer RealSubscriber on Cisco devices running Application and Content Networking System (ACNS) 5.1 allow remote attackers to cause a denial of service (CPU consumption) via malformed packets.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.03207 · Published 2005-03-01 · No fix listed
Priority LOW 28
Cisco devices running Application and Content Networking System (ACNS) 5.0 before 5.0.17.6 and 5.1 before 5.1.11.6 allow remote attackers to cause a denial of service (process restart) via a "crafted TCP connection."
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.02697 · Published 2005-03-01 · No fix listed
Priority LOW 35
The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check the length of Kerberos tickets during a handshake, which allows remote attackers to cause a de…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.10424 · Published 2004-03-18 · Fixed CWE-125
Priority LOW 33
OpenSSL 0.9.6 before 0.9.6d does not properly handle unknown message types, which allows remote attackers to cause a denial of service (infinite loop), as demonstrated using the Codenomicon TLS Test Tool.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.07229 · Published 2004-03-18 · Fixed
Priority MEDIUM 51
The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that triggers a null dereference.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.09537 · Published 2004-03-18 · Fixed CWE-476
Priority MEDIUM 40
Buffer overflow in the authentication module for Cisco ACNS 4.x before 4.2.11, and 5.x before 5.0.5, allows remote attackers to execute arbitrary code via a long password.
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.04589 · Published 2003-12-11 · No fix listed