Design/Logic Flaw

The SSLVPN feature in Cisco IOS 12.3 through 12.4 allows remote attackers to cause a denial of service device reload or hang via a crafted HTTPS packet...

Input validation

Multiple unspecified vulnerabilities in the home agent HA implementation in the 1 Mobile IP NAT Traversal feature and 2 Mobile IPv6 subsystem in Cisco IOS 12.3 through 12.4 allow remote attackers to cause a denial of service input queue wedge and interface outage via an ICMP packet, aka Bug ID...

CVE-2009-0629

Cisco IOS DLSw feature (12.2, 12.3, 12.4, 15.0, 15.1) is affected by a DoS via a sequence of malformed packets exploiting a narrow timing window (Bug ID CSCtf74999). The related Red Hat/NVD entries describe that this vulnerability can cause device crashes or reloads. Mitigation details are not pr...

CVE-2009-0626

The SSLVPN feature in Cisco IOS 12.3 through 12.4 allows remote attackers to cause a denial of service device reload or hang via a crafted HTTPS packet...

CVE-2009-0628

Memory leak in the SSLVPN feature in Cisco IOS 12.3 through 12.4 allows remote attackers to cause a denial of service memory consumption and device crash by disconnecting an SSL session in an abnormal manner, leading to a Transmission Control Block TCB leak...

CVE-2009-0634

Multiple unspecified vulnerabilities in the home agent HA implementation in the 1 Mobile IP NAT Traversal feature and 2 Mobile IPv6 subsystem in Cisco IOS 12.3 through 12.4 allow remote attackers to cause a denial of service input queue wedge and interface outage via an ICMP packet, aka Bug ID...

CVE-2009-0629

The 1 Airline Product Set aka ALPS, 2 Serial Tunnel Code aka STUN, 3 Block Serial Tunnel Code aka BSTUN, 4 Native Client Interface Architecture NCIA support, 5 Data-link switching aka DLSw, 6 Remote Source-Route Bridging RSRB, 7 Point to Point Tunneling Protocol PPTP, 8 X.25 for Record Boundary...

CVE-2009-0633

CVE-2009-0633 and related vulnerabilities affect Cisco IOS Software when Mobile IP NAT Traversal or Mobile IPv6 are enabled. The issue allows remote attackers to exhaust a router’s input queue and cause an interface outage by sending crafted MIPv6/Mobile IP packets, potentially DoS-ing affected d...

Design/Logic Flaw

Unspecified vulnerability in Cisco IOS 12.0 through 12.4, when configured with 1 IP Service Level Agreements SLAs Responder, 2 Session Initiation Protocol SIP, 3 H.323 Annex E Call Signaling Transport, or 4 Media Gateway Control Protocol MGCP allows remote attackers to cause a denial of service...

CVE-2009-0631

Cisco IOS 12.0–12.4 is affected when configured with (1) SLAs Responder, (2) SIP, (3) H.323 Annex E Call Signaling Transport, or (4) MGCP. A crafted UDP packet can cause the input queue on the inbound interface to become blocked, resulting in a denial of service. The connected sources confirm the...

CVE-2009-0634: Undefined Security Weakness

Multiple unspecified vulnerabilities in the home agent HA implementation in the 1 Mobile IP NAT Traversal feature and 2 Mobile IPv6 subsystem in Cisco IOS 12.3 through 12.4 allow remote attackers to cause a denial of service input queue wedge and interface outage via an ICMP packet, aka Bug ID...

CVE-2009-0637: Undefined Security Weakness

The SCP server in Cisco IOS 12.2 through 12.4, when Role-Based CLI Access is enabled, does not enforce the CLI view configuration for file transfers, which allows remote authenticated users with an attached CLI view to 1 read or 2 overwrite arbitrary files via an SCP command...

CVE-2009-0629: Undefined Security Weakness

The 1 Airline Product Set aka ALPS, 2 Serial Tunnel Code aka STUN, 3 Block Serial Tunnel Code aka BSTUN, 4 Native Client Interface Architecture NCIA support, 5 Data-link switching aka DLSw, 6 Remote Source-Route Bridging RSRB, 7 Point to Point Tunneling Protocol PPTP, 8 X.25 for Record Boundary...

CVE-2009-0633: Undefined Security Weakness

Multiple unspecified vulnerabilities in the 1 Mobile IP NAT Traversal feature and 2 Mobile IPv6 subsystem in Cisco IOS 12.3 through 12.4 allow remote attackers to cause a denial of service input queue wedge and interface outage via MIPv6 packets, aka Bug ID CSCsm97220...

CVE-2009-0635: Undefined Security Weakness

Memory leak in the Cisco Tunneling Control Protocol cTCP encapsulation feature in Cisco IOS 12.4, when an Easy VPN aka EZVPN server is enabled, allows remote attackers to cause a denial of service memory consumption and device crash via a sequence of TCP packets...

CVE-2009-0628: Exposure of Sensitive Information to an Unauthorized Actor

Memory leak in the SSLVPN feature in Cisco IOS 12.3 through 12.4 allows remote attackers to cause a denial of service memory consumption and device crash by disconnecting an SSL session in an abnormal manner, leading to a Transmission Control Block TCB leak...

CVE-2009-0631: Undefined Security Weakness

Unspecified vulnerability in Cisco IOS 12.0 through 12.4, when configured with 1 IP Service Level Agreements SLAs Responder, 2 Session Initiation Protocol SIP, 3 H.323 Annex E Call Signaling Transport, or 4 Media Gateway Control Protocol MGCP allows remote attackers to cause a denial of service...

CVE-2009-0630: Undefined Security Weakness

The 1 Cisco Unified Communications Manager Express; 2 SIP Gateway Signaling Support Over Transport Layer Security TLS Transport; 3 Secure Signaling and Media Encryption; 4 Blocks Extensible Exchange Protocol BEEP; 5 Network Admission Control HTTP Authentication Proxy; 6 Per-user URL Redirect for...

CVE-2009-0636: Undefined Security Weakness

Unspecified vulnerability in Cisco IOS 12.0 through 12.4, when SIP voice services are enabled, allows remote attackers to cause a denial of service device crash via a valid SIP message...

CVE-2009-0626: Undefined Security Weakness

The SSLVPN feature in Cisco IOS 12.3 through 12.4 allows remote attackers to cause a denial of service device reload or hang via a crafted HTTPS packet...