HP Data Protector CRS Opcode 1091 Stack Buffer Overflow (CVE-2013-2334)

A stack buffer overflow has been reported in HP Data Protector...

HP Data Protector CRS Opcode 260 Stack Buffer Overflow (CVE-2013-2332)

A stack buffer overflow has been discovered in HP Data Protector...

HP Data Protector CRS Opcode 264 Stack Buffer Overflow (CVE-2013-2327)

A stack buffer overflow has been discovered in HP Data Protector...

HP Data Protector CRS Opcode 215 and 263 Stack Buffer Overflow (CVE-2013-2328)

Two stack buffer overflows have been discovered in HP Data Protector...

HP Data Protector CRS Opcode 235 Stack Buffer Overflow (CVE-2013-2325)

A stack buffer overflow has been discovered in HP Data Protector. The vulnerability exists in the Cell Request service crs.exe, which listens on a randomly chosen port. The application fails to sanitize input with opcode 235, which can result in a stack buffer overflow. A remote, unauthenticated...

Code injection

The PPTP-ALG component in CRS Carrier Grade Services Engine CGSE and ASR 9000 Integrated Service Module ISM in Cisco IOS XR allows remote attackers to cause a denial of service module reset via crafted packet streams, aka Bug ID CSCue91963...

CVE-2013-5498

The CVE-2013-5498 issue affects the PPTP-ALG component of Cisco CRS Carrier Grade Services Engine (CGSE) and Cisco ASR 9000 Series ISM running IOS XR. The root cause is in the PPTP-ALG’s handling of packet streams, allowing an unauthenticated, remote attacker to cause a denial of service via craf...

CVE-2013-5498: Improper Input Validation

The PPTP-ALG component in CRS Carrier Grade Services Engine CGSE and ASR 9000 Integrated Service Module ISM in Cisco IOS XR allows remote attackers to cause a denial of service module reset via crafted packet streams, aka Bug ID CSCue91963...

PT-2013-5582

Name of the Vulnerable Software and Affected Versions Cisco CRS Carrier Grade Services Engine CGSE and Cisco ASR 9000 Series Integrated Service Module ISM affected versions not specified Description A vulnerability in the Point-to-Point Tunneling Protocol-Application Level Gateway PPTP-ALG...

HP Data Protector CRS Opcode 227 Stack Buffer Overflow (CVE-2013-2335)

A stack buffer overflow vulnerability has been discovered in HP Data Protector. The vulnerability exists in the Cell Request Service crs.exe, which listens on a randomly chosen port. The application fails to sanitize input with opcode 227, which can result in a stack buffer overflow. A remote,...

HP Data Protector CRS Opcode 234 Stack Buffer Overflow (CVE-2013-2326)

A buffer overflow has been reported in HP Data Protector. The vulnerability exists in the Cell Request Service crs.exe, which listens on a randomly chosen port. The application fails to sanitize input with opcode 234, which can result in a stack buffer overflow. A remote, unauthenticated attacker...

HP Data Protector CRS Opcode 211 Stack Buffer Overflow

Added: 07/24/2013 CVE: CVE-2013-2333 BID: 60309 OSVDB: 93867 Background HP Data Protector is an automated data backup solution. Problem A buffer overflow vulnerability in crs.exe when handling requests with opcode 211 allows remote attackers to execute arbitrary commands. Resolution Apply a patch...

HP Data Protector CRS Opcode 305 Stack Buffer Overflow (CVE-2013-2330)

A stack buffer overflow has been reported in HP Data Protector. The vulnerability is in the Cell Request service, which listens on a randomly chosen port. The application fails to sanitize input with opcode 305, which can result in a stack-based buffer overflow. A remote, unauthenticated attacker...

CVE-2013-1112

The CVE-2013-1112 issue pertains to Cisco Carrier Routing System (CRS). It is caused by improper handling of short malformed packets, leading to inefficient processing and a denial of service (packet loss). The vulnerability can be exploited by an unauthenticated, remote attacker to degrade norma...

CVE-2013-1112: Improper Input Validation

Cisco Carrier Routing System CRS allows remote attackers to cause a denial of service packet loss via short malformed packets that trigger inefficient processing, aka Bug ID CSCud79136...

PT-2013-2884

Name of the Vulnerable Software and Affected Versions Cisco Carrier Routing System CRS affected versions not specified Description The issue allows remote attackers to cause a denial of service, resulting in packet loss. This is achieved by sending short malformed packets that trigger inefficient...

CVE-2012-1342

Cisco Carrier Routing System CRS 3.9, 4.0, and 4.1 allows remote attackers to bypass ACL entries via fragmented packets, aka Bug ID CSCtj10975...

CVE-2012-1342

Cisco Carrier Routing System (CRS) versions 3.9, 4.0, and 4.1 are affected by CVE-2012-1342. The issue arises from improper handling of IPv4 fragments (noninitial fragments) which allows remote, unauthenticated attackers to bypass ACL entries and reach restricted network segments. The vulnerabili...

CVE-2012-1342: Incorrect Authorization

Cisco Carrier Routing System CRS 3.9, 4.0, and 4.1 allows remote attackers to bypass ACL entries via fragmented packets, aka Bug ID CSCtj10975...

CVE-2012-2488

Cisco IOS XR before 4.2.1 on ASR 9000 series devices and CRS series devices allows remote attackers to cause a denial of service packet transmission outage via a crafted packet, aka Bug IDs CSCty94537 and CSCtz62593...