4851 matches found
Design/Logic Flaw
Cisco IOS allows remote attackers to cause a denial of service crash via a crafted IPv6 Type 0 Routing header...
Cisco IOS畸形IP选项远程拒绝服务及代码执行漏洞
Cisco IOS是Cisco设备所使用的操作系统。 Cisco IOS在处理特定畸形的IP报文时存在漏洞，远程攻击者可能利用此漏洞导致设备无法正常工作或在设备上执行任意指令。 如果满足了所有以下3个条件的话： 1. 报文包含有特制的IP选择 2. 报文为以下协议之一： ICMP - Echo Type 8 - 'ping' ICMP - Timestamp Type 13 ICMP - Information Request Type 15 ICMP - Address Mask Request Type 17 PIMv2 - IP protocol 103 PGM - IP...
Cisco IOS特制TCP报文远程拒绝服务漏洞
Cisco IOS是Cisco设备所使用的操作系统。 Cisco IOS在处理特定畸形的TCP报文时存在漏洞，远程攻击者可能利用此漏洞对设备执行拒绝服务攻击，导致设备耗尽所有内存无法正常工作。 如果将Cisco IOS设备配置为接收TCP报文的话，则发送给Cisco IOS设备物理或虚拟接口IPv4地址的特制报文就可能导致泄漏少量的内存。这种内存泄漏可能造成耗尽内存资源，降低系统的性能。 请注意攻击者无需完成TCP三重握手就可以触发这个漏洞，因此伪造源址的TCP报文也可以完成攻击。这个漏洞仅适用于目标为Cisco IOS设备的通讯，穿越Cisco IOS设备的通讯不会触发这个漏洞。...
Cisco IOS fails to properly process TCP packets
Overview The Cisco IOS Transmission Control Protocol listener contains a memory leak. Description Cisco IOS is an operating system that is used on Cisco network devices. The Cisco IOS software can run Transmission Control Protocol TCP servers that allow administrators to connect to the devices fo...
[Full-disclosure] Cisco Security Advisory: IPv6 Routing Header Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: IPv6 Routing Header Vulnerability Advisory ID: cisco-sa-20070124-IOS-IPv6 http://www.cisco.com/warp/public/707/cisco-sa-20070124-IOS-IPv6.shtml Revision 1.0 For Public Release 2007 January 24 1600 UTC GMT -...
Cisco IOS Data-link Switching (DLSw) Capabilities Exchange Remote DoS (CSCsf28840)
The remote host is a CISCO router containing a version of IOS that is affected by a denial of service vulnerability. An attacker may exploit this flaw to crash the remote device. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid24019; scriptversion"1.19";...
Cisco IOS数据链路交换拒绝服务漏洞
Cisco IOS的数据链路交换（DLSw）功能允许通过IP网络传输IBM系统网络架构（SNA）和网络基础输入/输出系统（NetBIOS）通讯。 Cisco IOS DLSw功能在协调交互过程中处理某些无效选项时存在漏洞，远程攻击者可能利用此漏洞执行拒绝服务攻击，导致设备重载。 创建DLSw通讯包括以下几个操作阶段。 1. 在第一阶段，DLSw对等端通过TCP 2065或2067端口相互创建两个TCP连接，这些TCP连接是DLSw通讯的基础。 2. 创建连接之后DLSw伙伴在第二阶段交换所支持功能的列表，这有助于对等端使用相同的选项，如果DLSw伙伴由不同厂商生产的话这一点尤其重要。 3...
Design/Logic Flaw
The Data-link Switching DLSw feature in Cisco IOS 11.0 through 12.4 allows remote attackers to cause a denial of service device reload via "an invalid value in a DLSw message... during the capabilities exchange."...
CVE-2007-0199
The CVE-2007-0199 issue affects Cisco IOS DLSw (Data-link Switching) from versions 11.0 to 12.4. A remote attacker can trigger a device reload by sending an invalid value in a DLSw message during capabilities exchange, causing a denial of service. Multiple sources (NVD/Nessus-style advisories and...
Cisco Security Advisory: DLSw Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: DLSw Vulnerability Advisory ID: cisco-sa-20070110-dlsw http://www.cisco.com/warp/public/707/cisco-sa-20070110-dlsw.shtml Revision 1.0 For Public Release 2007 January 10 1600 UTC GMT -...
Cisco IOS Data-link Switching DoS
Device reload on malformed DLSw message parsing...
DLSw Vulnerability
A vulnerability exists in the Data-link Switching DLSw feature in Cisco IOS where an invalid value in a DLSw message could result in a reload of the DLSw device. Successful exploitation of this vulnerability requires that an attacker be able to establish a DLSw connection to the device. There are...
Cisco products contain hard-coded SNMP values
Overview Certain versions of the Cisco IOS software have a hard-coded SNMP read-write community string that cannot be changed by an administrator. Description Some versions of the Cisco IOS have a hardcoded SNMP read-write community string. This community string is designed to ensure that...
Cisco IOS fails to properly handle summary packets in the VLAN Trunking Protocol
Overview Cisco IOS fails to properly handle summary packets in the VLAN Trunking Protocol. This vulnerability may allow a remote, unauthenticated attacker to cause a denial-of-service condition. Description Cisco's VLAN Trunking Protocol VTP provides the ability to manage the addition, deletion,...
Cisco IOS contains buffer overflow in VTP VLAN name handling
Overview Cisco IOS fails to properly handle specially crafted VTP summary advertisement with overly long VLAN name. This vulnerability may allow a remote, unauthenticated attacker to execute arbitrary code or cause a denial-of-service condition. Description Cisco's VLAN Trunking Protocol VTP...
CVE-2006-4776
Heap-based buffer overflow in the VLAN Trunking Protocol VTP feature in Cisco IOS 12.119 allows remote attackers to execute arbitrary code via a long VLAN name in a VTP type 2 summary advertisement...
CVE-2006-4774
The VLAN Trunking Protocol VTP feature in Cisco IOS 12.119 allows remote attackers to cause a denial of service by sending a VTP version 1 summary frame with a VTP version field value of 2...
CVE-2006-4774
The VLAN Trunking Protocol VTP feature in Cisco IOS 12.119 allows remote attackers to cause a denial of service by sending a VTP version 1 summary frame with a VTP version field value of 2...
CVE-2006-4776
Cisco IOS CVE-2006-4776 is a heap-based buffer overflow in the VLAN Trunking Protocol (VTP) VLAN name handling (long VLAN name in VTP type 2 summary advertisement) that could allow a remote attacker to execute arbitrary code. Affected software: Cisco IOS 12.1(19) with VTP enabled; trigger require...