CVE-2008-3804: Undefined Security Weakness

Unspecified vulnerability in the Multi Protocol Label Switching MPLS Forwarding Infrastructure MFI in Cisco IOS 12.2 and 12.4 allows remote attackers to cause a denial of service memory corruption via crafted packets for which the software path is used...

Cisco IOS AIC HTTP传送报文远程拒绝服务漏洞

BUGTRAQ ID: 31354 CVE ID: CVE-2008-3812 CNCVE ID：CNCVE-20083812 防火墙是针对组织中网络资产进行访问控制的网络设备，防火墙一般放置在网络入口处，Cisco IOS软件提供一系列安全功能可提供用户配置简单或详细的防火墙策略。 HTTP默认使用80端口对Internet WEB服务进行传送，其由于在网络上的通用性，很少针对其合法性和标准一致性进行挑战，由于80通信一般在网络上都允许而不存在挑战，因此很多应用程序开发者借助HTTP通信作为替代的传送协议允许它们的应用程序通信通过或甚至绕过防火墙设置。当Cisco...

CVE-2008-3799: Missing Release of Resource after Effective Lifetime

Memory leak in the Session Initiation Protocol SIP implementation in Cisco IOS 12.2 through 12.4, when VoIP is configured, allows remote attackers to cause a denial of service memory consumption and voice-service outage via unspecified valid SIP messages...

CVE-2008-3808: Undefined Security Weakness

Unspecified vulnerability in Cisco IOS 12.0 through 12.4 allows remote attackers to cause a denial of service device reload via a crafted Protocol Independent Multicast PIM packet...

Cisco IOS MPLS转发架构远程拒绝服务漏洞

BUGTRAQ ID: 31360 CVE ID: CVE-2008-3804 CNCVE ID：CNCVE-20083804 Cisco IOS是一款流行的网络操作系统。 新版本的Cisco IOS软件中，一种新的报文转发架构提高了可量测性和性能，MFI转发架构针对用户透明。MFI管理用于转发的MPLS数据结构，并用于替代老的LFIB实现。Cisco IOS MFI实现处理特殊构建的报文时存在漏洞，可导致拒绝服务攻击。...

CVE-2008-3809: Undefined Security Weakness

Cisco IOS 12.0 through 12.4 on Gigabit Switch Router GSR devices aka 12000 Series routers allows remote attackers to cause a denial of service device crash via a malformed Protocol Independent Multicast PIM packet...

Cisco IOS SIP多个拒绝服务漏洞

发布时间：2008-09-25 录入：启明星辰 BUGTRAQ ID: 31361 CVE ID: CVE-2008-3799 CVE-2008-3800 CVE-2008-3801 CVE-2008-3802 CNCVE ID：CNCVE-20083799 CNCVE-20083800 CNCVE-20083801 CNCVE-20083802 Cisco IOS是一款流行的Internet网络操作系统。 Cisco IOS SIP实现存在多个问题，远程攻击者可以利用漏洞进行内存泄漏攻击或导致IOS设备重载。 Cisco IOS...

Vulnerability in Cisco IOS While Processing SSL Packet

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

Cisco IOS NAT Skinny Call Control Protocol Vulnerability

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

Cisco IOS Software Firewall Application Inspection Control Vulnerability

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

PT-2008-5158 · Cisco · Cisco Ios

Name of the Vulnerable Software and Affected Versions: Cisco IOS versions 12.2 and 12.4 Description: The issue is related to a Denial of Service DoS attack from specially crafted packets in the Multi Protocol Label Switching MPLS Forwarding Infrastructure MFI in Cisco IOS. This can cause memory...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the HTTP Administration component in Cisco IOS 12.4 on the 871 Integrated Services Router allow remote attackers to execute arbitrary commands via 1 a certain "show privilege" command to the /level/15/exec/- URI, and 2 a certain "alias...

CVE-2008-4128

Multiple cross-site request forgery CSRF vulnerabilities in the HTTP Administration component in Cisco IOS 12.4 on the 871 Integrated Services Router allow remote attackers to execute arbitrary commands via 1 a certain "show privilege" command to the /level/15/exec/- URI, and 2 a certain "alias...

CVE-2008-4128

Multiple cross-site request forgery CSRF vulnerabilities in the HTTP Administration component in Cisco IOS 12.4 on the 871 Integrated Services Router allow remote attackers to execute arbitrary commands via 1 a certain "show privilege" command to the /level/15/exec/- URI, and 2 a certain "alias...

CVE-2008-4128: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in the HTTP Administration component in Cisco IOS 12.4 on the 871 Integrated Services Router allow remote attackers to execute arbitrary commands via 1 a certain "show privilege" command to the /level/15/exec/- URI, and 2 a certain "alias...

Cisco IOS FTP Server Authentication Bypass Vulnerability

The Cisco IOS FTP server is enabled on the remote system. Description : The FTP server does not properly verify authentication, allowing for anonymous access to the file system. An attacker could use the ftp server to view/download confidential configuration files, or upload replacements which wi...

cisco password7 way of password-cracking Exploit

No description provided by source. / descambles cisco IOS type-7 passwords found somewhere on the internet, slightly modified, [email protected] gcc -Wall -o ciscocrack ciscocrack.c ./ciscocrack 01178E05590909022A / include stdio.h include ctype.h char xlat = 0x64, 0x73, 0x66, 0x64, 0x3b,...

Cisco IOS FTP Server Authentication Bypass Vulnerability

The Cisco IOS FTP server is enabled on the remote system which does not properly verify authentication, allowing for anonymous access to the file system. SPDX-FileCopyrightText: 2008 Ferdy Riphagen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Cisco IOS Tiny shellcode v1.0

No description provided by source. ---------------------------------------------------------------------------------------- Cisco IOS Tiny shellcode v1.0 c 2007 IRM Plc By Gyan Chawdhary ---------------------------------------------------------------------------------------- The code creates a ne...

Cisco IOS Bind shellcode v1.0

No description provided by source. ---------------------------------------------------------------------------------------- Cisco IOS Bind shellcode v1.0 c 2007 IRM Plc By Varun Uppal ---------------------------------------------------------------------------------------- The code creates a new...