Memory corruption

Cisco IOS XR allows local users to cause a denial of service Silicon Packet Processor memory corruption, improper mutex handling, and device reload by starting an outbound flood of large ICMP Echo Request packets and stopping this with a CTRL-C sequence, aka Bug ID CSCui60347...

CVE-2013-3464: Improper Restriction of Operations within the Bounds of a Memory Buffer

Cisco IOS XR allows local users to cause a denial of service Silicon Packet Processor memory corruption, improper mutex handling, and device reload by starting an outbound flood of large ICMP Echo Request packets and stopping this with a CTRL-C sequence, aka Bug ID CSCui60347...

PT-2013-4415

Name of the Vulnerable Software and Affected Versions Cisco IOS XR Software affected versions not specified Description The issue allows local users to cause a denial of service by starting an outbound flood of large ICMP Echo Request packets and stopping this with a CTRL-C sequence. This is due ...

CVE-2013-0149: Undefined Security Weakness

The OSPF implementation in Cisco IOS 12.0 through 12.4 and 15.0 through 15.3, IOS-XE 2.x through 3.9.xS, ASA and PIX 7.x through 9.1, FWSM, NX-OS, and StarOS before 14.0.50488 does not properly validate Link State Advertisement LSA type 1 packets before performing operations on the LSA database,...

Cisco IOS Extensible Authentication Protocol Vulnerability (cisco-sr-20071019-eap)

The version of Cisco IOS running on the remote host has a denial of service vulnerability. The Extensible Authentication Protocol EAP implementation does not properly process EAP packets, which could cause the device to crash. A remote, unauthenticated attacker could exploit this to execute...

Default configuration

The default configuration of the Group Encrypted Transport VPN GET VPN feature on Cisco IOS uses an improper mechanism for enabling Group Domain of Interpretation GDOI traffic flow, which allows remote attackers to bypass the encryption policy via certain uses of UDP port 848, aka Bug ID CSCui076...

CVE-2013-3436

The default configuration of the Group Encrypted Transport VPN GET VPN feature on Cisco IOS uses an improper mechanism for enabling Group Domain of Interpretation GDOI traffic flow, which allows remote attackers to bypass the encryption policy via certain uses of UDP port 848, aka Bug ID CSCui076...

CVE-2013-3436

Cisco IOS GET VPN vulnerable due to default implicit GDOI policy allowing unencrypted traffic on UDP 848, enabling bypass of encryption policy for GMs and KSs. Root cause is the default configuration that permits GDOI flow; exploitation requires access to trusted internal networks. Impact is bypa...

CVE-2013-3436: Undefined Security Weakness

The default configuration of the Group Encrypted Transport VPN GET VPN feature on Cisco IOS uses an improper mechanism for enabling Group Domain of Interpretation GDOI traffic flow, which allows remote attackers to bypass the encryption policy via certain uses of UDP port 848, aka Bug ID CSCui076...

PT-2013-4391

Name of the Vulnerable Software and Affected Versions Cisco IOS affected versions not specified Description The default configuration of the Group Encrypted Transport VPN GET VPN feature uses an improper mechanism for enabling Group Domain of Interpretation GDOI traffic flow. This allows remote...

Cisco IOS XE Version

The remote host is running IOS XE, an operating system for Cisco routers. Nessus was able to read the IOS XE version number via an SSH connection to the router or via SNMP. C Tenable, Inc. include"compat.inc"; if description scriptid67217; scriptversion"1.47";...

Multiple Vulnerabilities in Cisco IOS XE Software for 1000 Series Aggregation Services Routers (cisco-sa-20130410-asr1000)

Cisco IOS XE Software for 1000 Series Aggregation Services Routers ASR contains the following denial of service DoS vulnerabilities : - Cisco IOS XE Software IPv6 Multicast Traffic Denial of Service Vulnerability CVE-2013-1164 - Cisco IOS XE Software L2TP Traffic Denial of Service Vulnerability...

Cisco IOS XR Software SNMP拒绝服务漏洞

BUGTRAQ ID: 60153 CVECAN ID: CVE-2013-1204 Cisco IOS是多数思科系统路由器和网络交换机上使用的互联网络操作系统。 Cisco IOS XR在SNMP进程中存在安全漏洞，可使未经身份验证的远程攻击者重新加载受影响进程并泄露部分内存信息。此漏洞源于没有释放已经分配的内存。攻击者通过发送大量的UDP报文到SNMP端口162上可触发此漏洞。 0 Cisco IOS XR 厂商补丁： Cisco ----- Cisco已经为此发布了一个安全公告（CVE-2013-1204）以及相应补丁: CVE-2013-1204：Cisco IOS XR...

Memory corruption

Memory leak in the SNMP process in Cisco IOS XR allows remote attackers to cause a denial of service memory consumption or process reload by sending many port-162 UDP packets, aka Bug ID CSCug80345...

PT-2013-2969

Name of the Vulnerable Software and Affected Versions Cisco IOS XR affected versions not specified Description A memory leak in the SNMP process allows remote attackers to cause a denial of service by sending many port-162 UDP packets. The issue is due to not freeing allocated memory, which can b...

CVE-2013-1204: Undefined Security Weakness

Memory leak in the SNMP process in Cisco IOS XR allows remote attackers to cause a denial of service memory consumption or process reload by sending many port-162 UDP packets, aka Bug ID CSCug80345...

Cisco WebEx未初始化内存读取漏洞

BUGTRAQ ID: 59649 CVECAN ID: CVE-2013-1232 WebEx会议服务是Cisco WebEx管理和维护的托管多媒体会议解决方案。 多个Cisco WebEx产品上的Cisco IOS处理HTTP请求时存在错误，通过发送特制的请求到Cisco WebEx节点，未经身份验证的远程攻击者可利用此漏洞读取未初始化的内存。 0 Cisco IOS 15.3 Cisco WebEx 厂商补丁： Cisco ----- Cisco已经为此发布了一个安全公告（CVE-2013-1232）以及相应补丁: CVE-2013-1232：Cisco WebEx...

CVE-2013-1136: Undefined Security Weakness

The crypto engine process in Cisco IOS on Aggregation Services Router ASR Route Processor 2 does not properly manage memory, which allows local users to cause a denial of service route processor crash by creating multiple tunnels and then examining encryption statistics, aka Bug ID CSCuc52193...

PT-2013-2906

Name of the Vulnerable Software and Affected Versions Cisco IOS on Aggregation Services Router ASR Route Processor 2 affected versions not specified Description The issue is related to the crypto engine process in Cisco IOS, which does not properly manage memory. This allows local users to cause ...

PT-2013-1007

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.0 through 12.4 Cisco IOS versions 15.0 through 15.3 Cisco IOS-XE versions 2.x through 3.9.xS Cisco ASA and PIX versions 7.x through 9.1 Cisco FWSM Cisco NX-OS Cisco StarOS versions prior to 14.0.50488 Description The OSPF...