CVE-1999-0445

A vulnerability in the Virtual Private LAN Service (VPLS) code of Cisco IOS 15.0 through 15.4 for Cisco Catalyst 6800 Series Switches allows an unauthenticated, adjacent attacker to crash a C6800-16P10G or C6800-16P10G-XL line card, causing a denial of service (DoS). It stems from a memory management issue; the attacker creates a large number of VPLS-generated MAC entries in the MAC address table.

A vulnerability in the implementation of a protocol in Cisco Integrated Services Routers Generation 2 (ISR G2) Routers running Cisco IOS 15.0 through 15.6 allows an unauthenticated, adjacent attacker to cause an affected device to reload, resulting in a denial of service (DoS). It is due to misclassification of Ethernet frames; the attacker sends a crafted Ethernet frame.

Multiple CSRF vulnerabilities in the HTTP Administration component of Cisco IOS 12.4 on the 871 Integrated Services Router allow remote attackers to execute arbitrary commands. The attack involves requests to the /level/15/exec/- URI with the "show privilege" command and to the /level/15/exec/-/configure/http URI with the "alias exec" command.

Cisco IOS 12.2(15) and earlier allows remote attackers to cause a denial of service (refused VTY (virtual terminal) connections), via a crafted TCP connection to the Telnet or reverse Telnet port.