Cisco IOS Software NAT DNS漏洞

CVECAN ID: CVE-2014-2111 Cisco IOS是多数思科系统路由器和网络交换机上使用的互联网络操作系统。 Cisco IOS 15.1-15.4版本内的应用层网关ALG模块存在安全漏洞，未经身份验证的远程攻击者利用此漏洞可造成受影响设备重载，导致拒绝服务（内存耗尽）。 0 Cisco IOS 15.1-15.4 Cisco已经为此发布了一个安全公告（cisco-sa-20140326-nat）以及相应补丁:...

Cisco IOS SSL VPN拒绝服务漏洞

CVECAN ID: CVE-2014-2112 Cisco IOS是多数思科系统路由器和网络交换机上使用的互联网络操作系统。 Cisco IOS 15.1-15.4版本内的SSL VPN功能存在安全漏洞，远程攻击者通过特制的HTTP请求，利用此漏洞可造成拒绝服务（内存耗尽）。 0 Cisco IOS 15.1-15.4 Cisco已经为此发布了一个安全公告（cisco-sa-20140326-ios-sslvpn）以及相应补丁:...

Cisco 7600 Series Route Switch Processor 720 with 10 Gigabit Ethernet Up模块拒绝服务漏洞

CVECAN ID: CVE-2014-2107 Cisco IOS是多数思科系统路由器和网络交换机上使用的互联网络操作系统。 Cisco 7600 Series Route Switch Processor 720 with 10 Gigabit Ethernet Uplinks models RSP720-3C-10GE/RSP720-3CXL-10GE版本存在安全漏洞，未经身份验证的远程攻击者利用此漏洞可造成路由处理器重新启动或停止转发流量。此漏洞源于Kailash field-programmable gate array FPGA 2.6之前版本内的错误。 0 Cisco IO...

Cisco IOS Software IK3v2模块拒绝服务漏洞

CVECAN ID: CVE-2014-2108 Cisco IOS是多数思科系统路由器和网络交换机上使用的互联网络操作系统。 Cisco IOS 12.2、15.0-15.3、IOS XE 3.2-3.7、3.8-3.10版本存在安全漏洞，远程攻击者通过特制的IKEv2数据包，利用此漏洞可造成拒绝服务（内存耗尽）。 0 Cisco IOS 15.x Cisco IOS 12.2 Cisco已经为此发布了一个安全公告（cisco-sa-20140326-ikev2）以及相应补丁:...

CVE-2014-2108

Cisco IOS 12.2 and 15.0 through 15.3 and IOS XE 3.2 through 3.7 before 3.7.5S and 3.8 through 3.10 before 3.10.1S allow remote attackers to cause a denial of service device reload via a malformed IKEv2 packet, aka Bug ID CSCui88426...

Design/Logic Flaw

The Application Layer Gateway ALG module in Cisco IOS 12.2 through 12.4 and 15.0 through 15.4, when NAT is used, allows remote attackers to cause a denial of service device reload via crafted DNS packets, aka Bug ID CSCue00996...

Design/Logic Flaw

Cisco IOS 15.1 through 15.3 and IOS XE 3.3 and 3.5 before 3.5.2E; 3.7 before 3.7.5S; and 3.8, 3.9, and 3.10 before 3.10.2S allow remote attackers to cause a denial of service I/O memory consumption and device reload via a malformed IPv6 packet, aka Bug ID CSCui59540...

CVE-2014-2108

Cisco IOS 12.2 and 15.0 through 15.3 and IOS XE 3.2 through 3.7 before 3.7.5S and 3.8 through 3.10 before 3.10.1S allow remote attackers to cause a denial of service device reload via a malformed IKEv2 packet, aka Bug ID CSCui88426...

Design/Logic Flaw

The TCP Input module in Cisco IOS 12.2 through 12.4 and 15.0 through 15.4, when NAT is used, allows remote attackers to cause a denial of service memory consumption or device reload via crafted TCP packets, aka Bug IDs CSCuh33843 and CSCuj41494...

Code injection

The SSL VPN aka WebVPN feature in Cisco IOS 15.1 through 15.4 allows remote attackers to cause a denial of service memory consumption via crafted HTTP requests, aka Bug ID CSCuf51357...

CVE-2014-2109

The TCP Input module in Cisco IOS 12.2 through 12.4 and 15.0 through 15.4, when NAT is used, allows remote attackers to cause a denial of service memory consumption or device reload via crafted TCP packets, aka Bug IDs CSCuh33843 and CSCuj41494...

CVE-2014-2111

The Application Layer Gateway ALG module in Cisco IOS 12.2 through 12.4 and 15.0 through 15.4, when NAT is used, allows remote attackers to cause a denial of service device reload via crafted DNS packets, aka Bug ID CSCue00996...

CVE-2014-2109

The TCP Input module in Cisco IOS 12.2 through 12.4 and 15.0 through 15.4, when NAT is used, allows remote attackers to cause a denial of service memory consumption or device reload via crafted TCP packets, aka Bug IDs CSCuh33843 and CSCuj41494...

CVE-2014-2112

The SSL VPN aka WebVPN feature in Cisco IOS 15.1 through 15.4 allows remote attackers to cause a denial of service memory consumption via crafted HTTP requests, aka Bug ID CSCuf51357...

CVE-2014-2113

Cisco IOS 15.1 through 15.3 and IOS XE 3.3 and 3.5 before 3.5.2E; 3.7 before 3.7.5S; and 3.8, 3.9, and 3.10 before 3.10.2S allow remote attackers to cause a denial of service I/O memory consumption and device reload via a malformed IPv6 packet, aka Bug ID CSCui59540...

CVE-2014-2108

Cisco IOS 12.2 and 15.0 through 15.3 and IOS XE 3.2 through 3.7 before 3.7.5S and 3.8 through 3.10 before 3.10.1S allow remote attackers to cause a denial of service device reload via a malformed IKEv2 packet, aka Bug ID CSCui88426...

Code injection

Cisco IOS 15.12SY3 and earlier, when used with Supervisor Engine 2T aka Sup2T on Catalyst 6500 devices, allows remote attackers to cause a denial of service device crash via crafted multicast packets, aka Bug ID CSCuf60783...

CVE-2014-2124

CVE-2014-2124 affects Cisco IOS 15.1(2)SY3 and earlier on Catalyst 6500 with Supervisor Engine 2T (Sup2T). The root cause is incorrect processing of multicast traffic by the Sup2T, allowing remote attackers to cause a denial of service (device crash). Cisco’s advisory confirms the vulnerability a...

Cisco IOS FTP Server Remote Buffer Overflow - Ver2 (CVE-2007-2586)

A buffer overflow vulnerability has been reported in Cisco IOS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Cisco IOS Software IP Device Tracking DoS

A vulnerability in the IP Device Tracking function in Cisco IOS could allow a remote, unauthenticated attacker to trigger a denial of service condition resulting in a reload of the device. It should be noted that while the vendor describes a possible workaround, this plugin does not test for the...