CVE-2004-0308

CriticalCVSS 10.0/10Last modified Jun 16, 2026

Description

Unknown vulnerability in Cisco ONS 15327 before 4.1(3), ONS 15454 before 4.6(1), ONS 15454 SD before 4.1(3), and Cisco ONS15600 before 1.3(0) allows a superuser whose account is locked out, disabled, or suspended to gain unauthorized access via a Telnet connection to the VxWorks shell.

Metrics

CVSS 2.0 10.0/10AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.cisco.com/warp/public/707/cisco-sa-20040219-ONS.shtmlPatch, Vendor Advisory
http://www.osvdb.org/4010
http://www.securityfocus.com/bid/9699Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/15266
http://www.cisco.com/warp/public/707/cisco-sa-20040219-ONS.shtmlPatch, Vendor Advisory
http://www.osvdb.org/4010
http://www.securityfocus.com/bid/9699Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/15266

Timeline

Published: Nov 24, 2004
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2004

CVE-2004-030910.0Stack-based buffer overflow in the SMTP service support in vsmon.exe in Zone Labs ZoneAlarm before 4.5.538.001, ZoneLabs Integrity client 4.CVE-2004-03106.8Cross-site scripting (XSS) vulnerability in LiveJournal 1.0 and 1.1 allows remote attackers to execute Javascript as other users via the sty CVE-2004-031110.0American Power Conversion (APC) Web/SNMP Management SmartSlot Card 3.0 through 3.0.3 and 3.21 are shipped with a default password of TENmanU CVE-2004-03126.4Linksys WAP55AG 1.07 allows remote attackers with access to an SNMP read only community string to gain access to read/write communtiy string CVE-2004-031310.0Buffer overflow in PSOProxy 0.91 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long HTTP re CVE-2004-03144.3Cross-site scripting (XSS) vulnerability in done.jsp in WebzEdit 1.9 and earlier allows remote attackers to execute arbitrary script as othe CVE-2004-031510.0Buffer overflow in Avirt Voice 4.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a lo CVE-2004-03165.0Buffer overflow in Avirt Soho 4.3 allows remote attackers to cause a denial of service (crash) via (1) a large GET request to port 1080 or (CVE-2004-031710.0Buffer overflow in eauth in Load Sharing Facility 4.x, 5.x, and 6.x allows local users or remote attackers within the LSF cluster to cause a CVE-2004-031810.0Load Sharing Facility (LSF) 4.x, 5.x, and 6.x uses the LSF_EAUTH_UID environment variable, if it exists, instead of the real UID of the user CVE-2004-03196.8Cross-site scripting (XSS) vulnerability in the font tag in ezBoard 7.3u allows remote attackers to execute arbitrary script as other users,CVE-2004-03202.1Unknown vulnerability in nCipher Hardware Security Modules (HSM) 1.67.x through 1.99.x allows local users to access secrets stored in the mo