Cisco IOS NAT功能拒绝服务漏洞(CVE-2012-4618)

BUGTRAQ ID: 55693 CVE ID: CVE-2012-4618 Cisco IOS是多数思科系统路由器和网络交换机上使用的互联网络操作系统。NAT SIP ALG功能可通过IP报文的SIP负载内嵌入的IP地址转换，根据SIP部署VoIP解决方案之间的Cisco IOS NAT， Cisco IOS在启用了NAT SIP ALG功能处理SIP报文时存在安全漏洞，NAT SIP ALG是默认启用的并执行了IP报文的SIP负载转换。默认是对UDP端口5060报文转换NAT SIP。该端口使用全局配置命令"ip nat service sip udp port"配置。...

Cisco IOS Software Intrusion Prevention System Denial of Service Vulnerability

Cisco IOS Software contains a vulnerability in the Intrusion Prevention System IPS feature that could allow an unauthenticated, remote attacker to cause a reload of an affected device if specific Cisco IOS IPS configurations exist. Cisco has released software updates that address this...

CVE-2012-3923

The SSLVPN implementation in Cisco IOS 12.4, 15.0, 15.1, and 15.2, when DTLS is not enabled, does not properly handle certain outbound ACL configurations, which allows remote authenticated users to cause a denial of service device crash via a session involving a PPP over ATM PPPoA interface, aka...

CVE-2012-3079

Cisco IOS 12.2 allows remote attackers to cause a denial of service CPU consumption by establishing many IPv6 neighbors, aka Bug ID CSCtn78957...

Code injection

The FlexVPN implementation in Cisco IOS 15.2 and 15.3 allows remote authenticated users to cause a denial of service spoke crash via spoke-to-spoke traffic, aka Bug ID CSCtz02622...

Code injection

Cisco IOS 12.2 allows remote attackers to cause a denial of service CPU consumption by establishing many IPv6 neighbors, aka Bug ID CSCtn78957...

Design/Logic Flaw

The DMVPN tunnel implementation in Cisco IOS 15.2 allows remote attackers to cause a denial of service persistent IKE state via a large volume of hub-to-spoke traffic, aka Bug ID CSCtq39602...

Code injection

The SSLVPN implementation in Cisco IOS 12.4, 15.0, 15.1, and 15.2, when DTLS is not enabled, does not properly handle certain outbound ACL configurations, which allows remote authenticated users to cause a denial of service device crash via a session involving a PPP over ATM PPPoA interface, aka...

CVE-2012-3893

The FlexVPN implementation in Cisco IOS 15.2 and 15.3 allows remote authenticated users to cause a denial of service spoke crash via spoke-to-spoke traffic, aka Bug ID CSCtz02622...

CVE-2012-3924

Cisco IOS SSL VPN DTLS implementation (15.1/15.2) contains a DoS by mis-handling certain outbound ACL configurations, enabling an authenticated remote user to crash the device via a PPPoA session (Bug ID CSCty97961). Exploitation involves SSL VPN traffic terminating over PPPoA; Cisco has released...

CVE-2012-3923

The SSLVPN implementation in Cisco IOS 12.4, 15.0, 15.1, and 15.2, when DTLS is not enabled, does not properly handle certain outbound ACL configurations, which allows remote authenticated users to cause a denial of service device crash via a session involving a PPP over ATM PPPoA interface, aka...

CVE-2012-3915

CVE-2012-3915 affects Cisco IOS 15.2 DMVPN tunnel implementation. The issue allows remote attackers to cause a denial of service by sending a large volume of hub-to-spoke traffic, creating a persistent IKE state (Bug ID CSCtq39602). Connected records confirm the vulnerable component and outcome b...

Cisco IOS XR DoS

Crash on received packet processing...

Cisco IOS MallocLite BGP Update DoS

The remote Cisco IOS device is affected by a denial of service vulnerability due to a flaw in the MallocLite implementation. A remote attacker, via a BGP update message with a specially crafted local-preference attribute length, can cause the route processor to crash, resulting in a denial of...

Cisco IOS Clientless SSL VPN DoS

The remote Cisco IOS device is configured for clientless SSL VPN. It is, therefore, affected by a denial of service vulnerability due to an unspecified flaw that causes a device reload when using a web browser to refresh the SSL VPN portal page. A remote, authenticated attacker can exploit this t...

Cisco IOS Aironet Access Point DoS

The remote Cisco IOS device may have a denial of service vulnerability. An input queue wedge can occur when IOS is running on an Aironet Access Point. This results in clients being unable to be authenticated, resulting in a denial of service. C Tenable Network Security, Inc. include"compat.inc"; ...

Cisco IOS MMoH Information Leak

The remote Cisco IOS device has an information leak vulnerability. When the H.323 Multicast Music on Hold feature is enabled and in use, PSTN callers may be able to hear crosstalk. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid61577; scriptversion"1.5";...

mtrace NSE Script

Queries for the multicast path from a source to a destination host. This works by sending an IGMP Traceroute Query and listening for IGMP Traceroute responses. The Traceroute Query is sent to the first hop and contains information about source, destination and multicast group addresses. First hop...

Cisco IOS Web Authentication DoS

The version of Cisco IOS installed on the remote host is affected by a denial of service vulnerability due to an error while parsing local web authentication. A remote attacker, by entering an extremely rapid input of credentials, can exploit this to crash the switch, forcing a reboot. C Tenable...

CVE-2012-1338

Cisco IOS 15.0 and 15.1 on Catalyst 3560 and 3750 series switches allows remote authenticated users to cause a denial of service device reload by completing local web authentication quickly, aka Bug ID CSCts88664...