Cisco IOS TCP Sequence Prediction Connection Hijacking (CSCds04747)

Cisco IOS Software contains a flaw that permits the successful prediction of TCP Initial Sequence Numbers. This vulnerability is present in all released versions of Cisco IOS software running on Cisco routers and switches. It only affects the security of TCP connections that originate or terminat...

Cisco IOS ICMP redirect DoS - Cisco's response

-----BEGIN PGP SIGNED MESSAGE----- Hello, We can confirm the finding made by [email protected]. This issue is assigned Cisco bug ID CSCdx32056. The fix has been developed and it is being committed into all affected releases. The situation in Cisco IOS 12.x code is that the redirect cache will only...

Cisco IOS ICMP redirect DoS

Phenoelit Advisory wir-haben-auch-mal-was-gefunden 0815++++ Authors FX [email protected] FtR [email protected] kim0 [email protected] Phenoelit Group http://www.phenoelit.de Affected Products Cisco IOS - several versions Known vulnerable combinations: Cisco 1005 IOS 11.018 Cisco 1603 IOS 11.311b Cis...

Cisco IOS ICMP redirects DoS

ICMP redirect flood causes memory exhaustion...

Cisco IOS 11.x12.0 - ICMP Redirect Denial of Service

Cisco IOS 11.x12.0 - ICMP Redirect Denial of Service source: https://www.securityfocus.com/bid/4786/info IOS is the Internet Operating System, used on Cisco routers. It is distributed and maintained by Cisco. It has been reported that it is possible to cause a denial of service in some Cisco...

Cisco Security Advisory: NTP vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Cisco Security Advisory: NTP Vulnerability ========================================== Revision 1.0 For Public Release 2002 May 08 16:00 UTC+0000 - ---------------------------------------------------------------------------- Summary ======= Network Time Protocol...

CVE-1999-1175

The CVE-1999-1175 entry concerns Cisco’s Web Cache Control Protocol (WCCP) in Cisco Cache Engine on Cisco IOS 11.2 and earlier. The root cause is that WCCP does not use authentication, allowing a remote attacker to divert HTTP traffic to arbitrary hosts by sending valid WCCP packets to UDP port 2...

CVE-2001-0650

Cisco devices IOS 12.0 and earlier allow a remote attacker to cause a crash, or bad route updates, via malformed BGP updates with unrecognized transitive attribute...

CVE-2001-0537

HTTP server for Cisco IOS 11.3 to 12.2 allows attackers to bypass authentication and execute arbitrary commands, when local authorization is being used, by specifying a high access level in the URL...

CVE-2001-0750

Cisco IOS 12.12T, 12.13T allow remote attackers to cause a denial of service reload via a connection to TCP ports 3100-3999, 5100-5999, 7100-7999 and 10100-10999...

CVE-1999-1175

Web Cache Control Protocol WCCP in Cisco Cache Engine for Cisco IOS 11.2 and earlier does not use authentication, which allows remote attackers to redirect HTTP traffic to arbitrary hosts via WCCP packets to UDP port 2048...

Cisco IOS discloses fragments of previous packets when Express Forwarding is enabled

Overview A vulnerability exists in multiple versions of Cisco's Internetworking Operating System IOS software that allows an attacker to collect fragments of previously processed packets. Description Many networking devices running Cisco IOS with Cisco Express Forwarding CEF enabled contain a...

Cisco Security Advisory: Data Leak with Cisco Express Forwarding

-----BEGIN PGP SIGNED MESSAGE----- Cisco Security Advisory: Data Leak with Cisco Express Forwarding Enabled Revision 1.0 For Public Release 2002 February 27 08:00 UTC -0800 - -------------------------------------------------------------------------- Summary ======= All Cisco devices running Cisco...

Cisco IOS 1112 - SNMP Message Denial of Service

Cisco IOS 1112 - SNMP Message Denial of Service // source: https://www.securityfocus.com/bid/4132/info Cisco products contain multiple vulnerabilities in handling of SNMP requests and traps. A general report for multiple vendors was initially published on February 12 Bugtraq IDs 4088 and 4089,...

Cisco IOS 11/12 - SNMP Message Denial of Service

// source: https://www.securityfocus.com/bid/4132/info Cisco products contain multiple vulnerabilities in handling of SNMP requests and traps. A general report for multiple vendors was initially published on February 12 Bugtraq IDs 4088 and 4089, however more information is now available and a...

CVE-2001-0864

Cisco 12000 with IOS 12.0 and line cards based on Engine 2 does not properly handle the implicit "deny ip any any" rule in an outgoing ACL when the ACL contains exactly 448 entries, which can allow some outgoing packets to bypass access restrictions...

CVE-2001-0863

Cisco 12000 with IOS 12.0 and line cards based on Engine 2 does not handle the "fragment" keyword in a compiled ACL Turbo ACL for packets that are sent to the router, which allows remote attackers to cause a denial of service via a flood of fragments...

CVE-2001-0929

Cisco IOS Firewall Feature set, aka Context Based Access Control CBAC or Cisco Secure Integrated Software, for IOS 11.2P through 12.2T does not properly check the IP protocol type, which could allow remote attackers to bypass access control lists...

Cisco IOS Firewall Feature Set fails to check IP protocol type thereby allowing packets to bypass dynamic access control lists

Overview The Cisco IOS Firewall Feature Set also known as Cisco Secure Integrated Software, or Context Based Access Control may allow an intruder to pass traffic through the firewall in violation of implied security policies. Description It is important to note that only configurations that use t...

Cisco Security Advisory: IOS ARP Table Overwrite Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Cisco Security Advisory: Cisco IOS ARP Table Overwrite Vulnerability ========================================================================= Revision 1.0 For Release 2001 November 15 08:00 AM US/Pacific UTC -0700 -...