What is the severity of CVE-2004-0306?

CVE-2004-0306 is considered a critical vulnerability due to the risk of unauthorized access to system files.

How do I fix CVE-2004-0306?

To mitigate CVE-2004-0306, disable the TFTP service on UDP port 69 in your Cisco Optical Networking systems.

What devices are affected by CVE-2004-0306?

CVE-2004-0306 affects Cisco ONS 15327, ONS 15454, ONS 15454 SD, and ONS 15600 devices running specific vulnerable versions.

Is there a patch available for CVE-2004-0306?

Yes, patches are available for affected Cisco Optical Networking software versions to address CVE-2004-0306.

How does CVE-2004-0306 impact network security?

CVE-2004-0306 can allow remote attackers to read or modify critical system files, severely compromising network security.

Vulnerability/
CVE-2004-0306

medium

CWE

NVD-CWE-Other

1/9/2004

8/8/2024

CVE-2004-0306

First published: Wed Sep 01 2004(Updated: )

Cisco ONS 15327 before 4.1(3), ONS 15454 before 4.6(1), ONS 15454 SD before 4.1(3), and Cisco ONS 15600 before 1.3(0) enable TFTP service on UDP port 69 by default, which allows remote attackers to GET or PUT ONS system files on the current active TCC in the /flash0 or /flash1 directories.

Credit: cve@mitre.org

Affected Software	Affected Version	How to fix
Cisco Optical Networking systems software	=4.0.0
Cisco Optical Networking systems software	=1.0
Cisco Optical Networking systems software	=4.1\(2\)
Cisco Optical Networking systems software	=4.1\(3\)
Cisco Optical Networking systems software	=4.0\(2\)
Cisco Optical Networking systems software	=4.1.0
Cisco Optical Networking systems software	=4.1\(0\)
Cisco Optical Networking systems software	=4.1\(1\)
Cisco Optical Networking systems software	=4.0\(1\)
Cisco Optical Networking systems software	=4.5

Remedy

http://www.cisco.com/warp/public/707/cisco-sa-20040219-ONS.shtml

Remedy

http://www.securityfocus.com/bid/9699

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2004-0306?
CVE-2004-0306 is considered a critical vulnerability due to the risk of unauthorized access to system files.
How do I fix CVE-2004-0306?
To mitigate CVE-2004-0306, disable the TFTP service on UDP port 69 in your Cisco Optical Networking systems.
What devices are affected by CVE-2004-0306?
CVE-2004-0306 affects Cisco ONS 15327, ONS 15454, ONS 15454 SD, and ONS 15600 devices running specific vulnerable versions.
Is there a patch available for CVE-2004-0306?
Yes, patches are available for affected Cisco Optical Networking software versions to address CVE-2004-0306.
How does CVE-2004-0306 impact network security?
CVE-2004-0306 can allow remote attackers to read or modify critical system files, severely compromising network security.

agent/type
agent/softwarecombine
agent/remedy
collector/mitre-cve
source/MITRE
agent/author
agent/last-modified-date
agent/weakness
agent/references
agent/severity
agent/description
agent/first-publish-date
agent/event
agent/source
agent/tags
collector/nvd-historical
agent/software-canonical-lookup-request
collector/nvd-index
vendor/cisco
canonical/cisco optical networking systems software
version/cisco optical networking systems software/4.0.0
version/cisco optical networking systems software/1.0
version/cisco optical networking systems software/4.1\(2\)
version/cisco optical networking systems software/4.1\(3\)
version/cisco optical networking systems software/4.0\(2\)
version/cisco optical networking systems software/4.1.0
version/cisco optical networking systems software/4.1\(0\)
version/cisco optical networking systems software/4.1\(1\)
version/cisco optical networking systems software/4.0\(1\)
version/cisco optical networking systems software/4.5

Frequently Asked Questions

What is the severity of CVE-2004-0306?
CVE-2004-0306 is considered a critical vulnerability due to the risk of unauthorized access to system files.
How do I fix CVE-2004-0306?
To mitigate CVE-2004-0306, disable the TFTP service on UDP port 69 in your Cisco Optical Networking systems.
What devices are affected by CVE-2004-0306?
CVE-2004-0306 affects Cisco ONS 15327, ONS 15454, ONS 15454 SD, and ONS 15600 devices running specific vulnerable versions.
Is there a patch available for CVE-2004-0306?
Yes, patches are available for affected Cisco Optical Networking software versions to address CVE-2004-0306.
How does CVE-2004-0306 impact network security?
CVE-2004-0306 can allow remote attackers to read or modify critical system files, severely compromising network security.

CVE-2004-0306

Remedy

Remedy

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2004-0306?

How do I fix CVE-2004-0306?

What devices are affected by CVE-2004-0306?

Is there a patch available for CVE-2004-0306?

How does CVE-2004-0306 impact network security?

Company

Resources

Contact

Frequently Asked Questions

What is the severity of CVE-2004-0306?

How do I fix CVE-2004-0306?

What devices are affected by CVE-2004-0306?

Is there a patch available for CVE-2004-0306?

How does CVE-2004-0306 impact network security?