CVE-2011-4019

CVE-2011-4019 affects Cisco IOS 12.4 and 15.0–15.2, and Cisco Unified Communications Manager (CUCM) 7.x. The issue is a memory leak that allows remote attackers to cause denial of service by sending a crafted SIP SUBSCRIBE response. Root cause is a vulnerability in handling SIP SUBSCRIBE messages...

Wireshark Lucent/Ascend File Parser Denial of Service Vulnerability - Mac OS X

Wireshark is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark"...

CVE-2011-2586

The CVE-2011-2586 entry concerns Cisco IOS 12.4 and 15.0, where the HTTP client is vulnerable to a denial-of-service causing a device crash. The root cause is a malformed HTTP response to a request for service installation (Bug ID CSCts12249). The connected records corroborate the same affected p...

CVE-2011-3295

CVE-2011-3295 impacts Cisco IOS XR 3.8–4.1 (as deployed in Cisco Carrier Routing System and related products). The NETIO and IPV4_IO processes can be abused by crafted network traffic to cause a denial of service via CPU exhaustion. The available sources confirm the affected platform and the cond...

CVE-2011-4016

CVE-2011-4016 affects Cisco IOS PPP implementation via PTA and L2TP. The vulnerability allows remote attackers to cause a device crash (DoS) by sending crafted network traffic on affected platforms: Cisco IOS 12.2 and 15.0–15.2. Root cause details specify issues in the PPP handling during PTA/L2T...

CVE-2011-4007

Cisco IOS 15.0/15.1 and IOS XE 3.x are affected by CVE-2011-4007 due to improper handling of the "set mpls experimental imposition" command. The issue allows remote attackers to trigger a denial-of-service (device crash) through network traffic that triggers fragmentation or reassembly, per Bug I...

CVE-2011-4006

The CVE-2011-4006 issue affects Cisco ASA 5500 series with software 8.2–8.5, caused by a vulnerability in the ESMTP inspection feature that can be exploited to trigger a denial-of-service via an unspecified closing sequence, leading to CPU consumption. Remediation/mitigation reported in connected...

CVE-2011-4014

CVE-2011-4014 affects Cisco Wireless Control System (WCS) 7.0, via the TAC Case Attachment tool. The vulnerability allows remote authenticated users to read arbitrary files under webnms/Temp/ through unspecified vectors (Bug ID CSCtq86807). The available sources (NVD entry and Cisco notes) confir...

CVE-2011-4015

Cisco IOS 15.2S is affected by CVE-2011-4015, where remote attackers can trigger a denial of service (interface queue wedge) by sending malformed UDP traffic to port 465. The vulnerability is linked to Bug ID CSCts48300. Affected software is Cisco IOS 15.2S; the public description does not specif...

CVE-2011-4012

Cisco IOS 12.0, 15.0, and 15.1 are affected when a Policy Feature Card 3C (PFC3C) is used. The vulnerability involves failure to create a fragment entry during processing of an ICMPv6 ACL, as described by Bug ID CSCtj90091. Reported impact is unspecified in the provided documents, and the vulnera...

CVE-2011-3283

Cisco Carrier Routing System 3.9.1 is affected by a vulnerability that allows remote attackers to cause a denial of service (Metro subsystem crash) through a fragmented GRE packet (Bug ID CSCts14887). The available sources specify the affected product and version and the attack vector as network-...

CVE-2011-3309

CVE-2011-3309 affects Cisco ASA 5500 series devices running software 8.2 through 8.4, where the device processes IKE requests even when vpnclient mode is configured. The root cause is the acceptance and handling of IKE traffic that can be observed by reading responder traffic, enabling potential ...

CVE-2011-2583

Cisco Unified Contact Center Express (CCX) versions 8.0 and 8.5 are affected by CVE-2011-2583, which allows remote attackers to cause a denial of service via crafted network traffic (Bug CSCth33834). The connected sources confirm the affected product family and the DoS impact but do not provide d...

CVE-2011-3285

CRLF injection vulnerability in /+CSCOE+/logon.html on Cisco Adaptive Security Appliances ASA 5500 series devices with software 8.0 through 8.4 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors, aka Bug ID CSCth63101...

CVE-2011-3289

Cisco IOS 12.4 and 15.0–15.2 contains a vulnerability (Bug CSCtr97640) that allows physically proximate attackers to bypass the No Service Password-Recovery feature and read the startup configuration via unspecified vectors. Affected product family: Cisco IOS; affected versions: 12.4 and 15.0 thr...

CVE-2011-2578

CVE-2011-2578 describes a memory leak in Cisco IOS 15.1 and 15.2 that can be triggered by malformed SIP packets on a NAT interface, allowing remote attackers to cause a denial of service (memory consumption). This vulnerability is associated with Bug ID CSCts12366. The available references confir...

CVE-2011-3293

Cisco ACS 5.2 Solution Engine contains multiple CSRF vulnerabilities that allow an attacker to hijack administrator sessions by submitting requests that insert XSS sequences (Bug ID CSCtr78143). Reported across several sources (NVD, CVE records, PT Security/PT-2011-26) and historically discussed ...

CVE-2011-3285

CVE-2011-3285 describes a CRLF injection in the Cisco ASA 5500 series, affecting software versions 8.0 through 8.4 in the /+CSCOE+/logon.html endpoint. The vulnerability allows remote attackers to inject arbitrary HTTP headers and carry out HTTP response splitting via unspecified vectors (Bug ID ...

CVE-2011-3317

Cisco ACS 5.2 Solution Engine has multiple XSS vulnerabilities (CVE-2011-3317) that allow remote attackers to inject arbitrary web script or HTML via unspecified vectors (Bug ID CSCtr78192). Affected product: Cisco Secure Access Control Server (ACS) 5.2. Documented impact: cross-site scripting wi...

Wireshark ANSI A MAP Files Denial of Service Vulnerability - Mac OS X

Wireshark is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark"...