Cisco IOS Software Processing of SAA Packets

...

CVE-2002-0813

Heap-based buffer overflow in the TFTP server capability in Cisco IOS 11.1, 11.2, and 11.3 allows remote attackers to cause a denial of service reset or modify configuration via a long filename...

CVE-2002-1024

Cisco IOS 12.0 through 12.2, when supporting SSH, allows remote attackers to cause a denial of service CPU consumption via a large packet that was designed to exploit the SSH CRC32 attack detection overflow CVE-2001-0144...

CVE-2002-0339

Cisco IOS 11.1CC through 12.2 with Cisco Express Forwarding CEF enabled includes portions of previous packets in the padding of a MAC level packet when the MAC packet's length is less than the IP level packet length...

Cisco IOS ICMP Redirect Message Spoofing Remote DoS (CSCdx92043)

Sending bogus ICMP redirect packets, a malicious user can either disrupt or intercept communication from a router. This vulnerability is documented with the CISCO bug ID CSCdx92043 C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid11379; scriptversion"1.22";...

Cisco SIP Crafted INVITE Message Handling DoS (CSCdz39284, CSCdz41124)

It is possible to make the remote IOS crash when sending it malformed SIP packets. These vulnerabilities are documented as CISCO bug id CSCdz39284 and CSCdz41124. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid11380; scriptversion"1.21"; scriptcveid"CVE-2003-1109";...

Cisco IOS SSH Large Packet CPU Consumption DoS (CSCdw33027)

It is possible to make the remote IOS crash when sending it malformed SSH packets. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid11381; scriptversion"1.26"; scriptcveid"CVE-2002-1024"; scriptbugtraqid5114; scriptnameenglish:"Cisco IOS SSH Large Packet CPU Consumption...

CVE-2003-0100

Buffer overflow in Cisco IOS 11.2.x to 12.0.x allows remote attackers to cause a denial of service and possibly execute commands via a large number of OSPF neighbor announcements...

Cisco IOS OSPF Neighbor Announcement Remote Overflow (CSCdp58462)

The Open Shortest Path First OSPF implementation in remote Cisco IOS software versions is vulnerable to a denial of service if it receives a flood of neighbor announcements in which more than 255 hosts try to establish a neighbor relationship per interface. An attacker may use this flaw to preven...

Cisco IOS 1112 - OSPF Neighbor Buffer Overflow

Cisco IOS 1112 - OSPF Neighbor Buffer Overflow // source: https://www.securityfocus.com/bid/6895/info Cisco IOS is prone to a remotely exploitable buffer overflow condition when handling malformed OSPF Open Shortest Path First packets. The overflow occurs when more than 255 OSPF neighbors are...

Cisco IOS OSPF Neighbor Buffer Overflow Vulnerability

...

Cisco IOS 11/12 - OSPF Neighbor Buffer Overflow

// source: https://www.securityfocus.com/bid/6895/info Cisco IOS is prone to a remotely exploitable buffer overflow condition when handling malformed OSPF Open Shortest Path First packets. The overflow occurs when more than 255 OSPF neighbors are announced. This may make it possible to execute...

CVE-2002-2208

Extended Interior Gateway Routing Protocol EIGRP, as implemented in Cisco IOS 11.3 through 12.2 and other products, allows remote attackers to cause a denial of service flood by sending a large number of spoofed EIGRP neighbor announcements, which results in an ARP storm on the local network...

CVE-2002-1768

Cisco IOS 11.1 through 12.2, when HSRP support is not enabled, allows remote attackers to cause a denial of service CPU consumption via randomly sized UDP packets to the Hot Standby Routing Protocol HSRP port 1985...

CVE-2002-2053

The design of the Hot Standby Routing Protocol HSRP, as implemented on Cisco IOS 12.1, when using IRPAS, allows remote attackers to cause a denial of service CPU consumption via a router with the same IP address as the interface on which HSRP is running, which causes a loop...

CVE-2002-2315

Cisco IOS 11.2.x and 12.0.x does not limit the size of its redirect table, which allows remote attackers to cause a denial of service memory consumption via spoofed ICMP redirect packets to the router...

CVE-2002-1706

Cisco IOS software 11.3 through 12.2 running on Cisco uBR7200 and uBR7100 series Universal Broadband Routers allows remote attackers to modify Data Over Cable Service Interface Specification DOCSIS settings via a DOCSIS file without a Message Integrity Check MIC signature, which is approved by th...

Cisco IOS EIGRP Network DoS

Phenoelit Advisory wir-haben-auch-mal-was-gefunden 0815 +++- Title Cisco Systems IOS EIGRP Network Denial of Service Authors FX [email protected] Phenoelit Group http://www.phenoelit.de Advisory http://www.phenoelit.de/stuff/CiscoEIGRP.txt Affected Products Cisco IOS Tested on: IOS 11.3 IOS 12.019...

Cisco Security Advisory: OSM Line Card Header Corruption Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Cisco Security Advisory: OSM Line Card Header Corruption Vulnerability ======================================================================== Revision 1.0 FINAL For Public Release 2002 December 11 16:00 UTC -...

Cisco AS5350 - Universal Gateway Portscan Denial of Service

source: https://www.securityfocus.com/bid/6059/info The Cisco AS5350 Universal Gateway is reported to be prone to a denial of service condition. It is possible to cause this condition by portscanning a vulnerable device. This issue was reported for Cisco AS5350 devices running Cisco IOS release...