Memory corruption

Memory leak in the SSL VPN feature in Cisco IOS 12.4, 15.0, and 15.1, when HTTP port redirection is enabled, allows remote attackers to cause a denial of service memory consumption by improperly disconnecting SSL sessions, leading to connections that remain in the CLOSE-WAIT state, aka Bug ID...

CVE-2010-2836

CVE-2010-2836 describes a memory leak in Cisco IOS SSL VPN when HTTP port redirection is enabled. A remote attacker can exploit this by disconnecting SSL sessions, causing sessions to linger in CLOSE_WAIT and eventual memory exhaustion, potentially denying service to new connections. Affected sof...

CVE-2010-2829

CVE-2010-2829 affects Cisco IOS Software H.323 implementation; vulnerable are IOS 12.1–12.4, IOS 15.0–15.1, and IOS XE 2.5.x before 2.5.2 and 2.6.x before 2.6.1. A crafted H.323 packet can cause a denial of service (traceback and device reload) due to Bug CSCtd33567. Cisco advisories state update...

CVE-2010-2832: Undefined Security Weakness

Unspecified vulnerability in the NAT for H.323 implementation in Cisco IOS 12.1 through 12.4 and 15.0 through 15.1 allows remote attackers to cause a denial of service device reload via transit traffic, aka Bug ID CSCtf91428...

CVE-2010-2828: Undefined Security Weakness

Unspecified vulnerability in the H.323 implementation in Cisco IOS 12.1 through 12.4 and 15.0 through 15.1, and IOS XE 2.5.x before 2.5.2 and 2.6.x before 2.6.1, allows remote attackers to cause a denial of service device reload via crafted H.323 packets, aka Bug ID CSCtc73759...

CVE-2010-2836: Undefined Security Weakness

Memory leak in the SSL VPN feature in Cisco IOS 12.4, 15.0, and 15.1, when HTTP port redirection is enabled, allows remote attackers to cause a denial of service memory consumption by improperly disconnecting SSL sessions, leading to connections that remain in the CLOSE-WAIT state, aka Bug ID...

CVE-2010-2833: Undefined Security Weakness

Unspecified vulnerability in the NAT for H.225.0 implementation in Cisco IOS 12.1 through 12.4 and 15.0 through 15.1 allows remote attackers to cause a denial of service device reload via transit traffic, aka Bug ID CSCtd86472...

CVE-2010-2834: Undefined Security Weakness

Cisco IOS 12.2 through 12.4 and 15.0 through 15.1, Cisco IOS XE 2.5.x and 2.6.x before 2.6.1, and Cisco Unified Communications Manager aka CUCM, formerly CallManager 6.x before 6.15SU1, 7.x before 7.15, and 8.0 before 8.02 allow remote attackers to cause a denial of service device reload or...

CVE-2010-2830: Undefined Security Weakness

The IGMPv3 implementation in Cisco IOS 12.2, 12.3, 12.4, and 15.0 and IOS XE 2.5.x before 2.5.2, when PIM is enabled, allows remote attackers to cause a denial of service device reload via a malformed IGMP packet, aka Bug ID CSCte14603...

CVE-2010-2831: Undefined Security Weakness

Unspecified vulnerability in the NAT for SIP implementation in Cisco IOS 12.1 through 12.4 and 15.0 through 15.1 allows remote attackers to cause a denial of service device reload via transit traffic on UDP port 5060, aka Bug ID CSCtf17624...

CVE-2010-2829: Undefined Security Weakness

Unspecified vulnerability in the H.323 implementation in Cisco IOS 12.1 through 12.4 and 15.0 through 15.1, and IOS XE 2.5.x before 2.5.2 and 2.6.x before 2.6.1, allows remote attackers to cause a denial of service traceback and device reload via crafted H.323 packets, aka Bug ID CSCtd33567...

CVE-2010-2835: Undefined Security Weakness

Cisco IOS 12.2 through 12.4 and 15.0 through 15.1, Cisco IOS XE 2.5.x and 2.6.x before 2.6.1, and Cisco Unified Communications Manager aka CUCM, formerly CallManager 6.x before 6.15, 7.0 before 7.02asu3, 7.1su before 7.13bsu2, 7.1 before 7.15, and 8.0 before 8.01 allow remote attackers to cause a...

Multiple IOS IPS Vulnerabilities

The Intrusion Prevention System IPS feature set of Cisco IOS contains several vulnerabilities. These include: - Fragmented IP packets may be used to evade signature inspection. CVE-2007-0917 - IPS signatures utilizing the regular expression feature of the ATOMIC.TCP signature engine may cause a...

Vulnerability in Cisco IOS with OSPF, MPLS VPN, and Supervisor 32, Supervisor 720, or Route Switch Processor 720

Certain Cisco Catalyst 6500 Series and Cisco 7600 Router devices that run branches of Cisco IOS based on 12.2 can be vulnerable to a denial of service vulnerability that can prevent any traffic from entering an affected interface. For a device to be vulnerable, it must be configured for Open...

Cisco IOS Software Multiple Features IP Sockets Vulnerability

A vulnerability in the handling of IP sockets can cause devices to be vulnerable to a denial of service attack when any of several features of Cisco IOS Software are enabled. A sequence of specially crafted TCP/IP packets could cause any of the following results: Cisco has released free software...

Cisco IOS Software Crafted Encryption Packet Denial of Service Vulnerability - Cisco Systems

Cisco IOS Software contains a vulnerability that could allow an attacker to cause a Cisco IOS device to reload by remotely sending a crafted encryption packet. Cisco has released free software updates that address this vulnerability. TRUSTED...

Cisco Unified Communications Manager Express Denial of Service Vulnerabilities (cisco-sa-20100324-cucme)

Devices running Cisco IOS Software and configured for Cisco Unified Communications Manager Express CME or Cisco Unified Survivable Remote Site Telephony SRST operation are affected by two denial of service vulnerabilities that may result in a device reload if successfully exploited. The...

Cisco IOS Firewall Authentication Proxy for FTP and Telnet Sessions Buffer Overflow

The Cisco IOS Firewall Authentication Proxy for FTP and/or Telnet Sessions feature in specific versions of Cisco IOS software is vulnerable to a remotely-exploitable buffer overflow condition. Devices that do not support, or are not configured for Firewall Authentication Proxy for FTP and/or Teln...

Cisco IOS Software Network Time Protocol Packet Vulnerability - Cisco Systems

Cisco IOS Software with support for Network Time Protocol NTP version v4 contains a vulnerability processing specific NTP packets that will result in a reload of the device. This results in a remote denial of service DoS condition on the affected device. Cisco has released free software updates...

Cisco IOS Virtual Private Dial-up Network Denial of Service Vulnerability - Cisco Systems

Two vulnerabilities exist in the virtual private dial-up network VPDN solution when Point-to-Point Tunneling Protocol PPTP is used in certain Cisco IOS releases prior to 12.3. PPTP is only one of the supported tunneling protocols used to tunnel PPP frames within the VPDN solution. The first...