Cisco Security Advisory: Vulnerabilities in the Internet Key Exchange Xauth Implementation

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: ======================== Vulnerabilities in the Internet Key Exchange Xauth Implementation ================================================================= Revision 1.0 For Public Release 2005 April 6 1600 UTC -...

Cisco IOS IKE XAUTH ISAKMP IPSec SA Establish Authentication Bypass (CSCeg00277)

The remote version of IOS contains a feature called 'Easy VPN Server' that allows the administrator of the remote router to create a lightweight VPN server. There is an implementation flaw in the remote version of this software that could allow an authorized user to complete authentication and...

Cisco IOS Secure Shell Server TACACS+ Multiple DoS (CSCed65778, CSCed65285)

The remote version of IOS has the ability to enable an SSH server to let the administrators connect to the remote device. There is an implementation flaw in the remote version of this software which may allow an attacker to cause a resource starvation on the remote device, thus preventing it from...

Cisco IOS Malformed BGP Packet Processing Remote DoS (CSCee67450)

The remote version of IOS is vulnerable to a denial of service attack when processing malformed BGP packets. If IPv6 is enabled, an attacker may exploit this flaw to prevent the router from working properly. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid17635;...

Cisco IOS Multi Protocol Label Switching (MPLS) Packet Remote DoS (CSCeb56909)

The remote version of IOS is vulnerable to a denial of service attack when processing malformed MPLS packets. If IPv6 is enabled, an attacker may exploit this flaw to prevent the router from working properly. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid17630;...

Cisco IOS IPv6 Packet Processing Remote DoS (CSCed40933)

The remote version of IOS is vulnerable to a denial of service attack when processing malformed IPv6 packets. If IPv6 is enabled, an attacker may exploit this flaw to prevent the router from working properly. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid17629;...

Cisco IOS TFTP File Disclosure

The remote host has a TFTP server installed that is serving one or more Cisco IOS files. These files may contain passwords and other sensitive information. A remote attacker could use this information to mount further attacks. %NASLMINLEVEL 70300 This NASL script was written by Martin O'Neal of...

Cisco IOS Device TFTP Certificate Authority (CA) File Detection

The remote host has a TFTP server installed that is serving one or more Cisco IOS Certificate Authority CA files. These files may include the private key for the CA, which is information that should be considered sensitive. This NASL script was written by Martin O'Neal of Corsaire...

CVE-2004-1464

Cisco IOS 12.215 and earlier allows remote attackers to cause a denial of service refused VTY virtual terminal connections, via a crafted TCP connection to the Telnet or reverse Telnet port...

CVE-2004-1454

Cisco IOS 12.0S, 12.2, and 12.3, with Open Shortest Path First OSPF enabled, allows remote attackers to cause a denial of service device reload via a malformed OSPF packet...

CVE-2004-1464

Cisco IOS 12.215 and earlier allows remote attackers to cause a denial of service refused VTY virtual terminal connections, via a crafted TCP connection to the Telnet or reverse Telnet port...

CVE-2005-0195

Cisco IOS 12.0S through 12.3YH allows remote attackers to cause a denial of service device restart via a crafted IPv6 packet...

CVE-2005-0196

Cisco IOS 12.0 through 12.3YL, with BGP enabled and running the bgp log-neighbor-changes command, allows remote attackers to cause a denial of service device reload via a malformed BGP packet...

CVE-2005-0197

Cisco IOS 12.1T, 12.2, 12.2T, 12.3 and 12.3T, with Multi Protocol Label Switching MPLS installed but disabled, allows remote attackers to cause a denial of service device reload via a crafted packet sent to the disabled interface...

CVE-2005-0186

Cisco IOS 12.1YD, 12.2T, 12.3 and 12.3T, when configured for the IOS Telephony Service ITS, CallManager Express CME or Survivable Remote Site Telephony SRST, allows remote attackers to cause a denial of service device reboot via a malformed packet to the SCCP port...

Cisco Security Advisory: Cisco IOS Misformed BGP Packet Causes Reload

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco IOS Misformed BGP Packet Causes Reload Revision 1.0 For Public Release 2005 January 26 1600 UTC GMT - ----------------------------------------------------------------------- Contents ======== Summary Affected Products...

US-CERT Technical Cyber Security Alert TA05-026A -- Multiple Denial-of-Service Vulnerabilities in Cisco IOS

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Technical Cyber Security Alert TA05-026A Multiple Denial-of-Service Vulnerabilities in Cisco IOS Original release date: January 26, 2005 Last revised: -- Source: US-CERT Systems Affected Cisco routers and switches running IOS in various configurations...

Cisco IOS Misformed BGP Packet Causes Reload

...

Cisco IOS 12.0 IPv6 Remote DoS

Binary data 2558.prm...

Cisco IOS contains DoS vulnerability in MPLS packet processing

Overview A denial-of-service vulnerability exists in Cisco's Internetwork Operating System IOS. This vulnerability may allow attackers to conduct denial-of-service attacks on an affected device. Description Multi Protocol Label Switching MPLS is designed to increase the speed of IP...