CVE-2008-3806

Cisco IOS 12.0 through 12.4 on Cisco 10000, uBR10012 and uBR7200 series devices handles external UDP packets that are sent to 127.0.0.0/8 addresses intended for IPC communication within the device, which allows remote attackers to cause a denial of service device or linecard reload via crafted UD...

CVE-2008-3811

Cisco IOS 12.2 and 12.4 devices with NAT SCCP Fragmentation Support enabled are affected by CVE-2008-3811. The vulnerability allows remote attackers to cause a denial of service (device reload) via segmented SCCP messages. Cisco’s advisory indicates fixes are available and provides a workaround: ...

CVE-2008-3801

CVE-2008-3801 affects Cisco IOS 12.2–12.4 and Cisco Unified Communications Manager (CUCM) 4.1–6.1 when VoIP is enabled. Affected SIP processing of valid SIP messages can cause the CCM/IOS DPS to reload, resulting in DoS (service disruption). Cisco advisories list fixed releases: CUCM 4.1(3)SR8, 4...

CVE-2008-2739

The SERVICE.DNS signature engine in the Intrusion Prevention System IPS in Cisco IOS 12.3 and 12.4 allows remote attackers to cause a denial of service device crash or hang via network traffic that triggers unspecified IPS signatures, a different vulnerability than CVE-2008-1447...

Cisco IOS IPS 'SERVICE.DNS'远程拒绝服务漏洞

BUGTRAQ ID: 31364 CVE ID: CVE-2008-2739 CNCVE ID：CNCVE-20082739 Cisco IOS Intrusion Prevention System IPS是一款内联的报文检测分析功能，可用于检查大量的网络攻击。 Cisco IOS IPS包含的SERVICE.DNS签名引擎存在问题，远程攻击者可以利用漏洞对设备进行拒绝服务攻击。 部分网络通信可触发SERVICE.DNS签名引擎上的IPS签名，可导致Cisco IOS设备崩溃或挂起。这可导致破坏网路通信而导致拒绝服务攻击。 此漏洞的Cisco bug ID为CSCsq13348，CV...

CVE-2008-3813: Undefined Security Weakness

Unspecified vulnerability in Cisco IOS 12.2 and 12.4, when the L2TP mgmt daemon process is enabled, allows remote attackers to cause a denial of service device reload via a crafted L2TP packet...

CVE-2008-3805: Undefined Security Weakness

Cisco IOS 12.0 through 12.4 on Cisco 10000, uBR10012 and uBR7200 series devices handles external UDP packets that are sent to 127.0.0.0/8 addresses intended for IPC communication within the device, which allows remote attackers to cause a denial of service device or linecard reload via crafted UD...

CVE-2008-3802: Undefined Security Weakness

Unspecified vulnerability in the Session Initiation Protocol SIP implementation in Cisco IOS 12.2 through 12.4, when VoIP is configured, allows remote attackers to cause a denial of service device reload via unspecified valid SIP messages, aka Cisco bug ID CSCsk42759, a different vulnerability th...

Cisco IOS SSL会话终止远程拒绝服务漏洞

BUGTRAQ ID: 31365 CVE ID: CVE-2008-3798 CNCVE ID：CNCVE-20083798 Cisco IOS是一款流行的网络操作系统。 Cisco IOS在处理SSL会话终止时存在问题，远程攻击者可以利用漏洞对服务进行拒绝服务攻击。 此漏洞不需要合法的信任凭证，如用户名，密码或证书，SSL协议使用TCP作为传输协议，所以需要三次TCP握手完成后来进行此攻击，可减低漏洞的危险性。通过伪造的IP地址可利用此漏洞。 运行基于SSL服务的Cisco IOS软件在进行SSL会话终止时导致服务崩溃。 此漏洞的Cisco bug ID为CSCsj85065，CVE...

CVE-2008-3807: Undefined Security Weakness

Cisco IOS 12.2 and 12.3 on Cisco uBR10012 series devices, when linecard redundancy is configured, enables a read/write SNMP service with "private" as the community, which allows remote attackers to obtain administrative access by guessing this community and sending SNMP requests...

CVE-2008-3800: Undefined Security Weakness

Unspecified vulnerability in the Session Initiation Protocol SIP implementation in Cisco IOS 12.2 through 12.4 and Unified Communications Manager 4.1 through 6.1, when VoIP is configured, allows remote attackers to cause a denial of service device or process reload via unspecified valid SIP...

CVE-2008-3810: Improper Input Validation

Cisco IOS 12.2 and 12.4, when NAT Skinny Call Control Protocol SCCP Fragmentation Support is enabled, allows remote attackers to cause a denial of service device reload via segmented SCCP messages, aka CSCsg22426, a different vulnerability than CVE-2008-3811...

CVE-2008-3806: Undefined Security Weakness

Cisco IOS 12.0 through 12.4 on Cisco 10000, uBR10012 and uBR7200 series devices handles external UDP packets that are sent to 127.0.0.0/8 addresses intended for IPC communication within the device, which allows remote attackers to cause a denial of service device or linecard reload via crafted UD...

CVE-2008-3803: Undefined Security Weakness

A "logic error" in Cisco IOS 12.0 through 12.4, when a Multiprotocol Label Switching MPLS VPN with extended communities is configured, sometimes causes a corrupted route target RT to be used, which allows remote attackers to read traffic from other VPNs in opportunistic circumstances...

CVE-2008-2739: Undefined Security Weakness

The SERVICE.DNS signature engine in the Intrusion Prevention System IPS in Cisco IOS 12.3 and 12.4 allows remote attackers to cause a denial of service device crash or hang via network traffic that triggers unspecified IPS signatures, a different vulnerability than CVE-2008-1447...

CVE-2008-3798: Undefined Security Weakness

Cisco IOS 12.4 allows remote attackers to cause a denial of service device crash via a normal, properly formed SSL packet that occurs during termination of an SSL session...

Cisco IOS NAT Skinny Call控制协议多个远程拒绝服务漏洞

BUGTRAQ ID: 31359 CVE ID: CVE-2008-3810 CVE-2008-3811 CNCVE ID：CNCVE-20083810 CNCVE-20083811 Cisco IOS Skinny Call控制协议是Cisco专利的语音通讯协定，被用来促进在 CallManager与IP电话之间的来电管理功能。 Cisco IOS SCCP协议存在多个问题，远程攻击者可以利用漏洞对服务进行拒绝服务攻击。 Skinny Call Control Protocol SCCP在SCCP客户端和呼叫管理器Call Manager之间启用语音通信，通常CM默认在TCP...

CVE-2008-3811: Improper Input Validation

Cisco IOS 12.2 and 12.4, when NAT Skinny Call Control Protocol SCCP Fragmentation Support is enabled, allows remote attackers to cause a denial of service device reload via segmented SCCP messages, aka Cisco Bug ID CSCsi17020, a different vulnerability than CVE-2008-3810...

CVE-2008-3804: Undefined Security Weakness

Unspecified vulnerability in the Multi Protocol Label Switching MPLS Forwarding Infrastructure MFI in Cisco IOS 12.2 and 12.4 allows remote attackers to cause a denial of service memory corruption via crafted packets for which the software path is used...

Cisco IOS AIC HTTP传送报文远程拒绝服务漏洞

BUGTRAQ ID: 31354 CVE ID: CVE-2008-3812 CNCVE ID：CNCVE-20083812 防火墙是针对组织中网络资产进行访问控制的网络设备，防火墙一般放置在网络入口处，Cisco IOS软件提供一系列安全功能可提供用户配置简单或详细的防火墙策略。 HTTP默认使用80端口对Internet WEB服务进行传送，其由于在网络上的通用性，很少针对其合法性和标准一致性进行挑战，由于80通信一般在网络上都允许而不存在挑战，因此很多应用程序开发者借助HTTP通信作为替代的传送协议允许它们的应用程序通信通过或甚至绕过防火墙设置。当Cisco...