CVE-2011-0944: Undefined Security Weakness

Cisco IOS 12.4, 15.0, and 15.1 allows remote attackers to cause a denial of service device reload via malformed IPv6 packets, aka Bug ID CSCtj41194...

CVE-2011-0945: Undefined Security Weakness

Memory leak in the Data-link switching aka DLSw feature in Cisco IOS 12.1 through 12.4 and 15.0 through 15.1, and IOS XE 3.1.xS before 3.1.3S and 3.2.xS before 3.2.1S, when implemented over Fast Sequence Transport FST, allows remote attackers to cause a denial of service memory consumption and...

Cisco Security Advisory: Cisco IOS Software IPv6 Denial of Service Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Cisco Security Advisory: Cisco IOS Software IPv6 Denial of Service Vulnerability Advisory ID: cisco-sa-20110928-ipv6 Revision 1.0 For Public Release 2011 September 28 1600 UTC GMT +--------------------------------------------------------------------...

Cisco IOS Smart Install远程代码执行漏洞

BUGTRAQ ID: 49828 CVE ID: CVE-2011-3271 Cisco的网际操作系统（IOS）是一个网际互连优化的复杂操作系统。 Cisco IOS的Smart Install功能在实现上存在漏洞，远程非法攻击者可利用此漏洞在受影响设备上执行任意代码。 此漏洞源于运行Cisco IOS Software的Cisco Catalyst Switches中的Smart Install功能，Smart Install使用TCP端口4786进行通信，要触发此漏洞需要完整的TCP三方握手的连接。 Cisco IOS 15.x Cisco IOS 12.x 厂商补丁： Cisco...

Cisco IOS Software IPS and Zone-Based Firewall Vulnerabilities - Cisco Systems

Cisco IOS Software contains two vulnerabilities related to Cisco IOS Intrusion Prevention System IPS and Cisco IOS Zone-Based Firewall features. These vulnerabilities are : - Memory leak - Denial of service caused by processing specially crafted HTTP packets Cisco has released free software updat...

Cisco IOS Software Network Address Translation Vulnerabilities (cisco-sa-20110928-nat)

The Cisco IOS Software network address translation NAT feature contains multiple denial of service DoS vulnerabilities in the translation of the following protocols : - NetMeeting Directory Lightweight Directory Access Protocol, LDAP - Session Initiation Protocol. Multiple vulnerabilities - H.323...

Cisco IOS Software Network Address Translation Vulnerabilities

The Cisco IOS Software network address translation NAT feature contains multiple denial of service DoS vulnerabilities in the translation of the following protocols: NetMeeting Directory Lightweight Directory Access Protocol, LDAP Session Initiation Protocol. Multiple vulnerabilities H.323 protoc...

PT-2011-4369

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 15.0 through 15.1 Description The issue allows remote attackers to cause a denial of service, resulting in a device reload or hang, via a crafted HTTP packet. This is related to certain HTTP Layer 7 Application Control and...

PT-2011-4364

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.1 through 12.4 Cisco IOS versions 15.0 through 15.1 Cisco IOS XE version 3.1.xSG Description The issue affects the NAT implementation, allowing remote attackers to cause a denial of service by sending crafted SIP packets ...

PT-2011-1002

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.4, 15.0, and 15.1 Cisco IOS XE versions 2.5.x through 3.2.x Description The issue is related to multiple errors in the implementation of the Session Initiation Protocol SIP in Cisco IOS and Cisco IOS XE Software. An...

PT-2011-1006

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.4 through 15.2 Description The issue is related to a memory leak in the Zone-Based Firewall component of Cisco IOS, which can be exploited by sending crafted IP packets, leading to a denial of service due to memory...

PT-2011-1005

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.2SRE before 12.233SRE4 Cisco IOS versions 15.0 and 15.1 Cisco IOS XE versions 2.1.x through 3.3.x Description The issue allows remote attackers to cause a denial of service device reload via an ICMPv6 packet, related to a...

PT-2011-4363

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.4, 15.0, and 15.1 Cisco IOS XE versions 2.5.x through 3.2.x Description A memory leak in the Session Initiation Protocol SIP implementation allows remote attackers to cause a denial of service memory consumption via a...

PT-2011-4362

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.2SRE before 12.233SRE4 Cisco IOS versions 15.0 and 15.1 Cisco IOS XE versions 2.1.x through 3.3.x Description The issue allows remote attackers to cause a denial of service device crash via a crafted IPv6 packet, related ...

PT-2011-4368

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.1 through 12.4 Cisco IOS versions 15.0 through 15.1 Cisco IOS XE version 3.1.xSG Description A memory leak in the NAT implementation allows remote attackers to cause a denial of service by sending crafted SIP packets to U...

PT-2011-4365

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.1 through 12.4 Cisco IOS versions 15.0 through 15.1 Cisco IOS XE version 3.1.xSG Description The issue is related to the NAT implementation in Cisco IOS, allowing remote attackers to cause a denial of service by sending...

PT-2011-1004

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 15.0 through 15.1 Description The issue is related to a memory leak in Cisco IOS when IPS or Zone-Based Firewall is configured, allowing remote attackers to cause a denial of service via vectors that trigger many session...

PT-2011-4360

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.2 through 15.1 Description A vulnerability exists in the Smart Install feature of Cisco IOS Software, allowing an unauthenticated, remote attacker to execute arbitrary code or cause a denial of service via crafted TCP...

PT-2011-2774

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.1 through 12.4 Cisco IOS versions 15.0 through 15.1 Cisco IOS XE versions 3.1.xS before 3.1.3S Cisco IOS XE versions 3.2.xS before 3.2.1S Description A memory leak in the Data-link switching DLSw feature, when implemented...

PT-2011-4367

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.1 through 12.4 Cisco IOS versions 15.0 through 15.1 Cisco IOS XE version 3.1.xSG Description The provider-edge MPLS NAT implementation allows remote attackers to cause a denial of service via a malformed SIP packet to UDP...