Cisco IOS Software Network Address Translation Vulnerabilities

The Cisco IOS® Software Network Address Translation functionality
contains three denial of service (DoS) vulnerabilities. The first vulnerability
is in the translation of Session Initiation Protocol (SIP) packets, the second
vulnerability in the translation of H.323 packets and the third vulnerability
is in the translation of H.225.0 call signaling for H.323 packets.

Cisco has released software updates that address these vulnerabilities.

This advisory is posted at
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20100922-nat[“https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20100922-nat”].

Note: The September 22, 2010, Cisco IOS Software
Security Advisory bundled publication includes six Cisco Security Advisories.
Five of the advisories address vulnerabilities in Cisco IOS Software, and one
advisory addresses vulnerabilities in Cisco Unified Communications Manager.
Each advisory lists the releases that correct the vulnerability or
vulnerabilities detailed in the advisory. The table at the following URL lists
releases that correct all Cisco IOS Software vulnerabilities that have been
published on September 22, 2010, or earlier:

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20100922-bundle[“https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20100922-bundle”]

Individual publication links are in “Cisco Event Response:
Semiannual Cisco IOS Software Security Advisory Bundled Publication” at the
following link:

http://www.cisco.com/web/about/security/intelligence/Cisco_ERP_sep10.html[“http://www.cisco.com/web/about/security/intelligence/Cisco_ERP_sep10.html”]