4851 matches found
Memory corruption
Cisco IOS 12.0 through 12.4 allows remote attackers to cause a denial of service via 1 a malformed MGCP packet, which causes a device hang, aka CSCsf08998; a malformed H.323 packet, which causes a device crash, as identified by 2 CSCsi60004 with Proxy Unregistration and 3 CSCsg70474; and a...
CVE-2007-4286
Buffer overflow in the Next Hop Resolution Protocol NHRP functionality in Cisco IOS 12.0 through 12.4 allows remote attackers to cause a denial of service restart and execute arbitrary code via a crafted NHRP packet...
CVE-2007-4285
CVE-2007-4285 affects Cisco IOS and Cisco IOS XR 12.x (up to 12.3; prior to 12.3(15) and 12.3(14)T are mentioned in sources). A crafted IPv6 packet with a Type 0 Routing Header can leak partial packet contents or crash the router/component, with information leakage and possible IPv6 subsystem cra...
Cisco IOS Next Hop Resolution Protocol (NHRP) - Denial of Service
Cisco IOS Next Hop Resolution Protocol NHRP - Denial of Service // / / / nhrp-dos - Copyright by Martin Kluge, / / / / Feel free to modify this code as you like, as long as you include the / / above copyright statement. / / / / Please use this code only to check your OWN cisco routers. / / / /...
CISCO IOS NHRP缓冲区溢出漏洞
Cisco IOS是一款流行的网络操作系统。 Cisco IOS包含的NHRP协议存在缓冲区溢出问题，远程攻击者可以利用漏洞对应用协议进行拒绝服务攻击。 NHRP是一款标准用于提供非广播多路访问网络的层二到层三解析的协议。NHRP协议存在未明缓冲区溢出攻击，可导致拒绝服务或任意代码执行攻击。 Cisco IOS 12.4 MR Cisco IOS 12.3 YM Cisco IOS 12.3 YJ Cisco IOS 12.3 BW Cisco IOS 12.2 ZR Cisco IOS 12.2 ZL Cisco IOS 12.2 ZJ Cisco IOS 12.2 ZF Cisco...
Cisco IOS fails to properly handle Next Hop Resolution Protocol packets
Overview Cisco IOS fails to properly handle Next Hop Resolution Protocol packets, which could allow a remote, unauthenticated attacker to execute arbitrary code or cause a denial of service. Description Cisco IOS is an operating system that is used on Cisco network devices. Cisco IOS supports a...
[Full-disclosure] Cisco Security Advisory: Voice Vulnerabilities in Cisco IOS and Cisco Unified Communications Manager
Cisco Security Advisory: Voice Vulnerabilities in Cisco IOS and Cisco Unified Communications Manager Advisory ID: cisco-sa-20070808-IOS-voice http://www.cisco.com/warp/public/707/cisco-sa-20070808-IOS-voice.shtml Revision 1.0 For Public Release 2007 August 08 1600 UTC GMT -...
[Full-disclosure] Cisco NHRP denial of service (cisco-sa-20070808-nhrp)
Hi, this exploit/DoS addresses the recent NHRP bug in Cisco IOS CSCin95836 / cisco-sa-20070808-nhrp. The original advisory can be found here: http://www.cisco.com/en/US/products/productssecurityadvisory09186a008089963b.shtml Exploit/DoS: // / / / nhrp-dos - Copyright by Martin Kluge, [email protected] ...
Cisco Security Advisory: Vulnerability In Crypto Library
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Vulnerability In Crypto Library Advisory ID: cisco-sa-20070522-crypto.shtml http://www.cisco.com/warp/public/707/cisco-sa-20070522-crypto.shtml Revision 1.0 For Public Release 2007 May 22 1300 UTC GMT -...
RSA BSAFE库远程ASN.1解析拒绝服务漏洞
RSA BSAFE产品可为开发人员提供软件函数库，用于在各种嵌入的Internet应用中实现加密。 RSA BSAFE所提供的Crypto-C和Cert-C库的实现上存在漏洞，远程攻击者可能利用此漏洞导致设备拒绝服务。 如果用户通过任何使用了上述库的应用程序解析了畸形的ASN.1对象的话，就会触发这个漏洞，导致受影响的应用或设备崩溃。 Cisco IOS XR 3.4.X Cisco IOS XR 3.3.X Cisco IOS XR 3.2.X Cisco IOS 12.4 Cisco IOS 12.3 Cisco IOS 12.2 Cisco Firewall Services...
Multiple Vulnerabilities in Cisco IOS While Processing SSL Packets
Cisco IOS device may crash while processing malformed Secure Sockets Layer SSL packets. In order to trigger these vulnerabilities, a malicious client must send malformed packets during the SSL protocol exchange with the vulnerable device. Successful repeated exploitation of any of these...
CVE-2007-2587
The IOS FTP Server in Cisco IOS 11.3 through 12.4 allows remote authenticated users to cause a denial of service IOS reload via unspecified vectors involving transferring files aka bug ID CSCse29244...
Authentication flaw
The Intrusion Prevention System IPS feature for Cisco IOS 12.4XE to 12.3T allows remote attackers to bypass IPS signatures that use regular expressions via fragmented packets...
Design/Logic Flaw
The ATOMIC.TCP signature engine in the Intrusion Prevention System IPS feature for Cisco IOS 12.4XA, 12.3YA, 12.3T, and other trains allows remote attackers to cause a denial of service IPS crash and traffic loss via unspecified manipulations that are not properly handled by the regular expressio...
CVE-2007-0917
The Intrusion Prevention System IPS feature for Cisco IOS 12.4XE to 12.3T allows remote attackers to bypass IPS signatures that use regular expressions via fragmented packets...
CVE-2007-0918
The ATOMIC.TCP signature engine in the Intrusion Prevention System IPS feature for Cisco IOS 12.4XA, 12.3YA, 12.3T, and other trains allows remote attackers to cause a denial of service IPS crash and traffic loss via unspecified manipulations that are not properly handled by the regular expressio...
Multiple IOS IPS Vulnerabilities
The Intrusion Prevention System IPS feature set of Cisco IOS® contains several vulnerabilities. These include: Fragmented IP packets may be used to evade signature inspection. IPS signatures utilizing the regular expression feature of the ATOMIC.TCP signature engine may cause a router to crash...
Code injection
Cisco IOS 9.x, 10.x, 11.x, and 12.x and IOS XR 2.0.x, 3.0.x, and 3.2.x allows remote attackers to cause a denial of service or execute arbitrary code via a crafted IP option in the IP header in a 1 ICMP, 2 PIMv2, 3 PGM, or 4 URD packet...
Memory corruption
Memory leak in the TCP listener in Cisco IOS 9.x, 10.x, 11.x, and 12.x allows remote attackers to cause a denial of service by sending crafted TCP traffic to an IPv4 address on the IOS device...