Cisco IOS Software Multiple Features IP Sockets Vulnerability

A vulnerability in the handling of IP sockets can cause devices to be vulnerable to a denial of service attack when any of several features of Cisco IOS Software are enabled. A sequence of specially crafted TCP/IP packets could cause any of the following results: Cisco has released free software...

Cisco IOS Software Session Initiation Protocol Denial of Service Vulnerability (cisco-sa-20090923-sip)

A vulnerability exists in the Session Initiation Protocol SIP implementation in Cisco IOS Software that could allow an unauthenticated attacker to cause a denial of service DoS condition on an affected device when the Cisco Unified Border Element feature is enabled. Cisco has released free softwa...

Cisco IOS PPTP Vulnerability - Cisco Systems

Point-to-Point Tunneling Protocol PPTP allows users to tunnel to an Internet Protocol IP network using a Point-to-Point Protocol PPP. The protocol is described in RFC2637. PPTP implementation using Cisco IOS software releases contains a vulnerability that will crash a router if it receives a...

Vulnerabilities in Cisco IOS Secure Shell Server - Cisco Systems

Certain release trains of Cisco Internetwork Operating System IOS, when configured to use the IOS Secure Shell SSH server in combination with Terminal Access Controller Access Control System Plus TACACS+ as a means to perform remote management tasks on IOS devices, may contain two vulnerabilities...

Cisco IOS cTCP Denial of Service Vulnerability - Cisco Systems

A series of TCP packets may cause a denial of service DoS condition on Cisco IOS devices that are configured as Easy VPN servers with the Cisco Tunneling Control Protocol cTCP encapsulation feature. Cisco has released free software updates that address this vulnerability. No workarounds are...

Cisco Unified Communications Manager Express Denial of Service Vulnerabilities (cisco-sa-20100324-cucme)

Devices running Cisco IOS Software and configured for Cisco Unified Communications Manager Express CME or Cisco Unified Survivable Remote Site Telephony SRST operation are affected by two denial of service vulnerabilities that may result in a device reload if successfully exploited. The...

Multiple SSH Vulnerabilities - Cisco Systems

Four different Cisco product lines are susceptible to multiple vulnerabilities discovered in the Secure Shell SSH protocol version 1.5. These issues have been addressed, and fixes have been integrated into the Cisco products that support this protocol. By exploiting the weakness in the SSH...

Cisco IOS Software Crafted Encryption Packet Denial of Service Vulnerability - Cisco Systems

Cisco IOS Software contains a vulnerability that could allow an attacker to cause a Cisco IOS device to reload by remotely sending a crafted encryption packet. Cisco has released free software updates that address this vulnerability. TRUSTED...

RADIUS Authentication Bypass (cisco-sa-20050629-aaa)

Remote Authentication Dial In User Service RADIUS authentication on a device that is running certain versions of Cisco Internetworking Operating System IOS and configured with a fallback method to none can be bypassed. Systems that are configured for other authentication methods or that are not...

Combined IOS Table for January 24, 2007 Security Advisories (deprecated)

On January 24 2007, Cisco released three security advisories for vulnerabilities in the TCP/IP implementation of IOS. Exploitation of these vulnerabilities could result in a denial of service or execution of arbitrary code. This plugin checks if the appropriate fix for all three advisories has be...

Cisco IOS Software H.323 Denial of Service Vulnerability - Cisco Systems

The H.323 implementation in Cisco IOS Software contains a vulnerability that can be exploited remotely to cause a device that is running Cisco IOS Software to reload. Cisco has released free software updates that address this vulnerability. There are no workarounds to mitigate the vulnerability...

DLSw Vulnerability - Cisco Systems

A vulnerability exists in the Data-link Switching DLSw feature in Cisco IOS where an invalid value in a DLSw message could result in a reload of the DLSw device. Successful exploitation of this vulnerability requires that an attacker be able to establish a DLSw connection to the device. There are...

Cisco Unified Communications Manager Express Vulnerability - Cisco Systems

Cisco IOS devices that are configured for Cisco Unified Communications Manager Express CME and the Extension Mobility feature are affected by a buffer overflow vulnerability. Successful exploitation of this vulnerability may result in the execution of arbitrary code or a denial of service DoS...

Cisco IOS Software Mobile IP and Mobile IPv6 Vulnerabilities - Cisco Systems

Devices that are running Cisco IOS Software and configured for Mobile IP Network Address Translation NAT Traversal feature or Mobile IPv6 are vulnerable to a denial of service DoS attack that may result in a blocked interface. Cisco has released free software updates that address these...

IPv6 Routing Header Vulnerability

Processing a specially crafted IPv6 Type 0 Routing header can crash a device running Cisco IOS software. This vulnerability does not affect IPv6 Type 2 Routing headers which are used in mobile IPv6. IPv6 is not enabled by default in Cisco IOS. Cisco has made free software available to address thi...

Information Leakage Using IPv6 Routing Header in Cisco IOS and Cisco IOS XR - Cisco Systems

Cisco IOS and Cisco IOS XR contain a vulnerability when processing specially crafted IPv6 packets with a Type 0 Routing Header present. Exploitation of this vulnerability can lead to information leakage on affected IOS and IOS XR devices, and may also result in a crash of the affected IOS device...

Cisco IOS Software SNMP Read-Write ILMI Community String Vulnerability - Cisco Systems

Cisco IOS Software releases based on versions 11.x and 12.0 contain a defect that allows a limited number of SNMP objects to be viewed and modified without authorization using a undocumented ILMI community string. Some of the modifiable objects are confined to the MIB-II system group, such as...

Cisco IOS Virtual Private Dial-up Network Denial of Service Vulnerability - Cisco Systems

Two vulnerabilities exist in the virtual private dial-up network VPDN solution when Point-to-Point Tunneling Protocol PPTP is used in certain Cisco IOS releases prior to 12.3. PPTP is only one of the supported tunneling protocols used to tunnel PPP frames within the VPDN solution. The first...

Cisco IOS Firewall Authentication Proxy for FTP and Telnet Sessions Buffer Overflow

The Cisco IOS Firewall Authentication Proxy for FTP and/or Telnet Sessions feature in specific versions of Cisco IOS software is vulnerable to a remotely-exploitable buffer overflow condition. Devices that do not support, or are not configured for Firewall Authentication Proxy for FTP and/or Teln...

Crafted TCP Packet Can Cause Denial of Service

The Cisco IOS Transmission Control Protocol TCP listener in certain versions of Cisco IOS software is vulnerable to a remotely-exploitable memory leak that may lead to a denial of service condition. This vulnerability only applies to traffic destined to the Cisco IOS device. Traffic transiting th...