Cisco IOS NAT功能拒绝服务漏洞(CVE-2012-4618)

BUGTRAQ ID: 55693 CVE ID: CVE-2012-4618 Cisco IOS是多数思科系统路由器和网络交换机上使用的互联网络操作系统。NAT SIP ALG功能可通过IP报文的SIP负载内嵌入的IP地址转换，根据SIP部署VoIP解决方案之间的Cisco IOS NAT， Cisco IOS在启用了NAT SIP ALG功能处理SIP报文时存在安全漏洞，NAT SIP ALG是默认启用的并执行了IP报文的SIP负载转换。默认是对UDP端口5060报文转换NAT SIP。该端口使用全局配置命令"ip nat service sip udp port"配置。...

CVE-2012-4618

The CVE-2012-4618 issue affects Cisco IOS Software Network Address Translation NAT with the SIP ALG feature. The vulnerability arises when SIP payloads are translated for in-transit packets, causing a denial of service that can trigger a device reload. Affected IOS versions noted in the sources i...

CVE-2012-4620: Undefined Security Weakness

Cisco IOS 12.2 and 15.0 through 15.2 on Cisco 10000 series routers, when a tunnel interface exists, allows remote attackers to cause a denial of service interface queue wedge via tunneled 1 GRE/IP, 2 IPIP, or 3 IPv6 in IPv4 packets, aka Bug ID CSCts66808...

PT-2012-5525

Name of the Vulnerable Software and Affected Versions Cisco IOS XE version 03.02.00.XO.15.02XO on Catalyst 4500E series switches with a Supervisor Engine 7L-E card installed Description The issue allows remote attackers to cause a denial of service, resulting in a card reload, by sending malforme...

CVE-2012-4621: Undefined Security Weakness

The Device Sensor feature in Cisco IOS 15.0 through 15.2 allows remote attackers to cause a denial of service device reload via a DHCP packet, aka Bug ID CSCty96049...

Cisco IOS Software Intrusion Prevention System Denial of Service Vulnerability

Cisco IOS Software contains a vulnerability in the Intrusion Prevention System IPS feature that could allow an unauthenticated, remote attacker to cause a reload of an affected device if specific Cisco IOS IPS configurations exist. Cisco has released software updates that address this...

PT-2012-1013

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.3 through 12.4 Cisco IOS versions 15.0 through 15.2 Description The Intrusion Prevention System IPS feature in Cisco IOS contains a vulnerability that allows remote attackers to cause a denial of service device reload via...

PT-2012-5522

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.2, 12.4, 15.0 through 15.2 Description The issue allows remote attackers to cause a denial of service via transit IP packets. This is related to the SIP ALG feature in the NAT implementation and the translation of IP...

PT-2012-5524

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 15.0 through 15.2 Description The issue allows remote attackers to cause a denial of service device reload via a DHCP packet. An attacker could exploit this by sending a single DHCP packet to or through an affected device,...

PT-2012-1014

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.2 through 12.4 Cisco IOS versions 15.0 through 15.2 Cisco IOS XE versions 2.1.x through 2.6.x Cisco IOS XE versions 3.1.xS before 3.1.4S Cisco IOS XE versions 3.1.xSG Cisco IOS XE versions 3.2.xSG before 3.2.5SG Cisco IOS...

PT-2012-1012

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.2, 12.4, and 15.0 through 15.2 Description The issue is related to a denial of service vulnerability in the Network Address Translation NAT feature of Cisco IOS. This vulnerability can be exploited by remote attackers who...

PT-2012-1011

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager versions 6.x through 7.x before 7.15bsu5 Cisco Unified Communications Manager versions 8.x before 8.51su4 Cisco Unified Communications Manager versions 8.6 before 8.62asu1 Cisco IOS versions 12.2 through 12...

PT-2012-5521

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 15.2 Cisco IOS XE versions 3.5.xS through 3.5.2S Cisco IOS XR versions 4.1.0 through 4.2.2 Description The vulnerability can be triggered when the router receives a malformed attribute from a peer on an existing BGP session...

CVE-2012-3923

The SSLVPN implementation in Cisco IOS 12.4, 15.0, 15.1, and 15.2, when DTLS is not enabled, does not properly handle certain outbound ACL configurations, which allows remote authenticated users to cause a denial of service device crash via a session involving a PPP over ATM PPPoA interface, aka...

CVE-2012-3079

Cisco IOS 12.2 allows remote attackers to cause a denial of service CPU consumption by establishing many IPv6 neighbors, aka Bug ID CSCtn78957...

Code injection

Cisco IOS 12.2 allows remote attackers to cause a denial of service CPU consumption by establishing many IPv6 neighbors, aka Bug ID CSCtn78957...

Design/Logic Flaw

The DMVPN tunnel implementation in Cisco IOS 15.2 allows remote attackers to cause a denial of service persistent IKE state via a large volume of hub-to-spoke traffic, aka Bug ID CSCtq39602...

Code injection

The FlexVPN implementation in Cisco IOS 15.2 and 15.3 allows remote authenticated users to cause a denial of service spoke crash via spoke-to-spoke traffic, aka Bug ID CSCtz02622...

Code injection

The SSLVPN implementation in Cisco IOS 12.4, 15.0, 15.1, and 15.2, when DTLS is not enabled, does not properly handle certain outbound ACL configurations, which allows remote authenticated users to cause a denial of service device crash via a session involving a PPP over ATM PPPoA interface, aka...

CVE-2012-3924

Cisco IOS SSL VPN DTLS implementation (15.1/15.2) contains a DoS by mis-handling certain outbound ACL configurations, enabling an authenticated remote user to crash the device via a PPPoA session (Bug ID CSCty97961). Exploitation involves SSL VPN traffic terminating over PPPoA; Cisco has released...