CVE-2011-3282

Unspecified vulnerability in Cisco IOS 12.2SRE before 12.233SRE4, 15.0, and 15.1, and IOS XE 2.1.x through 3.3.x, when an MPLS domain is configured, allows remote attackers to cause a denial of service device reload via an ICMPv6 packet, related to an expired MPLS TTL, aka Bug ID CSCtj30155...

CVE-2011-0945

Memory leak in the Data-link switching aka DLSw feature in Cisco IOS 12.1 through 12.4 and 15.0 through 15.1, and IOS XE 3.1.xS before 3.1.3S and 3.2.xS before 3.2.1S, when implemented over Fast Sequence Transport FST, allows remote attackers to cause a denial of service memory consumption and...

CVE-2011-3276

CVE-2011-3276 relates to Cisco IOS NAT vulnerabilities affecting SIP over TCP (port 5060). The connected Cisco advisory and security entries describe how crafted SIP traffic could trigger a DoS, causing a device reload or hang by NAT processing SIP over TCP. The vulnerability is part of a broader...

CVE-2011-3277

CVE-2011-3277 affects Cisco IOS NAT implementation (12.1–12.4, 15.0–15.1) and IOS-XE 3.1.xSG. The issue arises from NAT handling of H.323 traffic on TCP/1720, enabling remote attackers to cause a DoS (device reload). Cisco’s advisory notes multiple NAT DoS vectors (including H.323), with mitigati...

Cisco Security Advisory: Cisco IOS Software IPv6 Denial of Service Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Cisco Security Advisory: Cisco IOS Software IPv6 Denial of Service Vulnerability Advisory ID: cisco-sa-20110928-ipv6 Revision 1.0 For Public Release 2011 September 28 1600 UTC GMT +--------------------------------------------------------------------...

Cisco IOS Software Network Address Translation Vulnerabilities (cisco-sa-20110928-nat)

The Cisco IOS Software network address translation NAT feature contains multiple denial of service DoS vulnerabilities in the translation of the following protocols : - NetMeeting Directory Lightweight Directory Access Protocol, LDAP - Session Initiation Protocol. Multiple vulnerabilities - H.323...

Cisco IOS Smart Install远程代码执行漏洞

BUGTRAQ ID: 49828 CVE ID: CVE-2011-3271 Cisco的网际操作系统（IOS）是一个网际互连优化的复杂操作系统。 Cisco IOS的Smart Install功能在实现上存在漏洞，远程非法攻击者可利用此漏洞在受影响设备上执行任意代码。 此漏洞源于运行Cisco IOS Software的Cisco Catalyst Switches中的Smart Install功能，Smart Install使用TCP端口4786进行通信，要触发此漏洞需要完整的TCP三方握手的连接。 Cisco IOS 15.x Cisco IOS 12.x 厂商补丁： Cisco...

Cisco IOS Software IPS and Zone-Based Firewall Vulnerabilities - Cisco Systems

Cisco IOS Software contains two vulnerabilities related to Cisco IOS Intrusion Prevention System IPS and Cisco IOS Zone-Based Firewall features. These vulnerabilities are : - Memory leak - Denial of service caused by processing specially crafted HTTP packets Cisco has released free software updat...

Cisco IOS Software Network Address Translation Vulnerabilities

The Cisco IOS Software network address translation NAT feature contains multiple denial of service DoS vulnerabilities in the translation of the following protocols: NetMeeting Directory Lightweight Directory Access Protocol, LDAP Session Initiation Protocol. Multiple vulnerabilities H.323 protoc...

CVE-2011-1625

Cisco IOS 12.2, 12.3, 12.4, 15.0, and 15.1, when the data-link switching DLSw feature is configured, allows remote attackers to cause a denial of service device crash by sending a sequence of malformed packets and leveraging a "narrow timing window," aka Bug ID CSCtf74999, a different vulnerabili...

CVE-2011-1625

Cisco IOS 12.2, 12.3, 12.4, 15.0, and 15.1, when the data-link switching DLSw feature is configured, allows remote attackers to cause a denial of service device crash by sending a sequence of malformed packets and leveraging a "narrow timing window," aka Bug ID CSCtf74999, a different vulnerabili...

Design/Logic Flaw

Cisco IOS 12.2, 12.3, 12.4, 15.0, and 15.1, when the data-link switching DLSw feature is configured, allows remote attackers to cause a denial of service device crash by sending a sequence of malformed packets and leveraging a "narrow timing window," aka Bug ID CSCtf74999, a different vulnerabili...

CVE-2011-1625

Cisco IOS 12.2, 12.3, 12.4, 15.0, and 15.1, when the data-link switching DLSw feature is configured, allows remote attackers to cause a denial of service device crash by sending a sequence of malformed packets and leveraging a "narrow timing window," aka Bug ID CSCtf74999, a different vulnerabili...

Cisco Security Advisory: Cisco Content Services Gateway Denial of Service Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Cisco Security Advisory: Cisco Content Services Gateway Denial of Service Vulnerability Advisory ID: cisco-sa-20110706-csg Revision 1.0 For Public Release 2011 July 06 1600 UTC GMT +-------------------------------------------------------------------...

CVE-2011-2395

The Neighbor Discovery ND protocol implementation in Cisco IOS on unspecified switches allows remote attackers to bypass the Router Advertisement Guarding functionality via a fragmented IPv6 packet in which the Router Advertisement RA message is contained in the second fragment, as demonstrated b...

CVE-2011-2395

The Neighbor Discovery ND protocol implementation in Cisco IOS on unspecified switches allows remote attackers to bypass the Router Advertisement Guarding functionality via a fragmented IPv6 packet in which the Router Advertisement RA message is contained in the second fragment, as demonstrated b...

Cisco IOS Software Version Detection (ssh)

Get Cisco IOS Software Version via SSH. This VT has been deprecated and replaced by the VT SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Cisco IOS Detection Consolidation

Consolidation of Cisco IOS detections. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only include"pluginfeedinfo.inc"; ifdescription...

CVE-2011-1651

Cisco IOS XR 3.9.x and 4.0.x before 4.0.3 and 4.1.x before 4.1.1, when an SPA interface processor is installed, allows remote attackers to cause a denial of service device reload via a crafted IPv4 packet, aka Bug ID CSCto45095...

CVE-2011-1651

Cisco IOS XR 3.9.x and 4.0.x before 4.0.3 and 4.1.x before 4.1.1, when an SPA interface processor is installed, allows remote attackers to cause a denial of service device reload via a crafted IPv4 packet, aka Bug ID CSCto45095...