PT-2011-2770

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 15.0 through 15.1 Description The issue concerns the PKI functionality, which fails to prevent permanent caching of certain public keys. This allows remote attackers to bypass authentication and potentially have other impact...

CVE-2011-0348

Cisco IOS 12.411MD, 12.415MD, 12.422MD, 12.424MD before 12.424MD3, 12.422MDA before 12.422MDA5, and 12.424MDA before 12.424MDA3 on the Cisco Content Services Gateway Second Generation aka CSG2 allows remote attackers to bypass intended access restrictions and intended billing restrictions by...

CVE-2011-0348

CVE-2011-0348 affects Cisco IOS for the CSG2 (CSG2 on 12.4(11)MD, 12.4(15)MD, 12.4(22)MD, and 12.4(24)MD family) and enables a service policy bypass by sending HTTP traffic to a restricted destination after unrestricted HTTP traffic. Root cause is a vulnerability in policy/billing handling on the...

CVE-2011-0349: Undefined Security Weakness

Unspecified vulnerability in Cisco IOS 12.424MD before 12.424MD2 on the Cisco Content Services Gateway Second Generation aka CSG2 allows remote attackers to cause a denial of service device hang or reload via crafted TCP packets, aka Bug ID CSCth17178, a different vulnerability than CVE-2011-0350...

Cisco Security Advisory: Cisco Content Services Gateway Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Cisco Security Advisory: Cisco Content Services Gateway Vulnerabilities Advisory ID: cisco-sa-20110126-csg2 http://www.cisco.com/warp/public/707/cisco-sa-20110126-csg2.shtml Revision 1.0 For Public Release 2011 January 26 1600 UTC GMT...

PT-2011-2287

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.411MD through 12.424MD before 12.424MD3 Cisco IOS versions 12.422MDA before 12.422MDA5 Cisco IOS versions 12.424MDA before 12.424MDA3 Description The issue allows remote attackers to bypass intended access restrictions an...

PT-2011-2289

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.424MD through 12.424MD1 Description The issue allows remote attackers to cause a denial of service, resulting in a device hang or reload, via crafted TCP packets. Recommendations For Cisco IOS version 12.424MD, update to...

PT-2011-2288

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.424MD through 12.424MD1 Description The issue allows remote attackers to cause a denial of service, resulting in a device hang or reload, via crafted TCP packets. Recommendations For Cisco IOS version 12.424MD, update to...

CVE-2011-0348: Undefined Security Weakness

Cisco IOS 12.411MD, 12.415MD, 12.422MD, 12.424MD before 12.424MD3, 12.422MDA before 12.422MDA5, and 12.424MDA before 12.424MDA3 on the Cisco Content Services Gateway Second Generation aka CSG2 allows remote attackers to bypass intended access restrictions and intended billing restrictions by...

CVE-2011-0350: Undefined Security Weakness

Unspecified vulnerability in Cisco IOS 12.424MD before 12.424MD2 on the Cisco Content Services Gateway Second Generation aka CSG2 allows remote attackers to cause a denial of service device hang or reload via crafted TCP packets, aka Bug ID CSCth41891, a different vulnerability than CVE-2011-0349...

CVE-2010-4683

Memory leak in Cisco IOS before 15.01XA5 might allow remote attackers to cause a denial of service memory consumption by sending a crafted SIP REGISTER message over UDP, aka Bug ID CSCtg41733...

CVE-2010-4687

STCAPP aka the SCCP telephony control application on Cisco IOS before 15.01XA1 does not properly handle multiple calls to a shared line, which allows remote attackers to cause a denial of service port hang by simultaneously ending two calls that were controlled by CallManager Express CME, aka Bug...

CVE-2009-5039

Memory leak in the gkcircuitinfodoinacf function in the H.323 implementation in Cisco IOS before 15.01XA allows remote attackers to cause a denial of service memory consumption via a large number of calls over a long duration, as demonstrated by InterZone Clear Token IZCT test traffic, aka Bug ID...

CVE-2009-5039

Memory leak in the gkcircuitinfodoinacf function in the H.323 implementation in Cisco IOS before 15.01XA allows remote attackers to cause a denial of service memory consumption via a large number of calls over a long duration, as demonstrated by InterZone Clear Token IZCT test traffic, aka Bug ID...

Memory corruption

Memory leak in the gkcircuitinfodoinacf function in the H.323 implementation in Cisco IOS before 15.01XA allows remote attackers to cause a denial of service memory consumption via a large number of calls over a long duration, as demonstrated by InterZone Clear Token IZCT test traffic, aka Bug ID...

Memory corruption

Memory leak in Cisco IOS before 15.01XA5 might allow remote attackers to cause a denial of service memory consumption by sending a crafted SIP REGISTER message over UDP, aka Bug ID CSCtg41733...

Design/Logic Flaw

Cisco IOS before 15.01XA1 does not clear the public key cache upon a change to a certificate map, which allows remote authenticated users to bypass a certificate ban by connecting with a banned certificate that had previously been valid, aka Bug ID CSCta79031...

Design/Logic Flaw

CallManager Express CME on Cisco IOS before 15.01XA1 does not properly handle SIP TRUNK traffic that contains rate bursts and a "peculiar" request size, which allows remote attackers to cause a denial of service memory consumption by sending this traffic over a long duration, aka Bug ID CSCtb4795...

CVE-2009-5038

Cisco IOS before 15.01XA does not properly handle IRC traffic during a specific time period after an initial reload, which allows remote attackers to cause a denial of service device reload via an attempted connection to a certain IRC server, related to a "corrupted magic value," aka Bug ID...

Design/Logic Flaw

STCAPP aka the SCCP telephony control application on Cisco IOS before 15.01XA1 does not properly handle multiple calls to a shared line, which allows remote attackers to cause a denial of service port hang by simultaneously ending two calls that were controlled by CallManager Express CME, aka Bug...