CVE-2007-4430: Improper Input Validation

Unspecified vulnerability in Cisco IOS 12.0 through 12.4 allows context-dependent attackers to cause a denial of service device restart and BGP routing table rebuild via certain regular expressions in a "show ip bgp regexp" command. NOTE: unauthenticated remote attacks are possible in environment...

Cisco IOS 12.3 - Show IP BGP Regexp Remote Denial of Service

Cisco IOS 12.3 - Show IP BGP Regexp Remote Denial of Service source: https://www.securityfocus.com/bid/25352/info Cisco IOS is prone to a remote denial-of-service vulnerability because the software fails to properly handle certain CLI commands. To issue commands that trigger this vulnerability,...

nhrp-dos.txt

Hi, this exploit/DoS addresses the recent NHRP bug in Cisco IOS CSCin95836 / cisco-sa-20070808-nhrp. The original advisory can be found here: http://www.cisco.com/en/US/products/productssecurityadvisory09186a008089963b.shtml Exploit/DoS: // / / / nhrp-dos - Copyright by Martin Kluge, / / / / Feel...

Memory corruption

Cisco IOS 12.0 through 12.4 allows remote attackers to cause a denial of service via 1 a malformed MGCP packet, which causes a device hang, aka CSCsf08998; a malformed H.323 packet, which causes a device crash, as identified by 2 CSCsi60004 with Proxy Unregistration and 3 CSCsg70474; and a...

Buffer overflow

Buffer overflow in the Next Hop Resolution Protocol NHRP functionality in Cisco IOS 12.0 through 12.4 allows remote attackers to cause a denial of service restart and execute arbitrary code via a crafted NHRP packet...

Code injection

Multiple memory leaks in Cisco IOS 12.0 through 12.4 allow remote attackers to cause a denial of service device crash via a malformed SIP packet, aka 1 CSCsf11855, 2 CSCeb21064, 3 CSCse40276, 4 CSCse68355, 5 CSCsf30058, 6 CSCsb24007, and 7 CSCsc60249...

CVE-2007-4286

Buffer overflow in the Next Hop Resolution Protocol NHRP functionality in Cisco IOS 12.0 through 12.4 allows remote attackers to cause a denial of service restart and execute arbitrary code via a crafted NHRP packet...

CVE-2007-4292

Multiple memory leaks in Cisco IOS 12.0 through 12.4 allow remote attackers to cause a denial of service device crash via a malformed SIP packet, aka 1 CSCsf11855, 2 CSCeb21064, 3 CSCse40276, 4 CSCse68355, 5 CSCsf30058, 6 CSCsb24007, and 7 CSCsc60249...

CVE-2007-4285

Unspecified vulnerability in Cisco IOS and Cisco IOS XR 12.x up to 12.3, including some versions before 12.315 and 12.314T, allows remote attackers to obtain sensitive information partial packet contents or cause a denial of service router or component crash via crafted IPv6 packets with a Type 0...

CVE-2007-4286

Buffer overflow in the Next Hop Resolution Protocol NHRP functionality in Cisco IOS 12.0 through 12.4 allows remote attackers to cause a denial of service restart and execute arbitrary code via a crafted NHRP packet...

CVE-2007-4285

CVE-2007-4285 affects Cisco IOS and Cisco IOS XR 12.x (up to 12.3; prior to 12.3(15) and 12.3(14)T are mentioned in sources). A crafted IPv6 packet with a Type 0 Routing Header can leak partial packet contents or crash the router/component, with information leakage and possible IPv6 subsystem cra...

CVE-2007-4292: Undefined Security Weakness

Multiple memory leaks in Cisco IOS 12.0 through 12.4 allow remote attackers to cause a denial of service device crash via a malformed SIP packet, aka 1 CSCsf11855, 2 CSCeb21064, 3 CSCse40276, 4 CSCse68355, 5 CSCsf30058, 6 CSCsb24007, and 7 CSCsc60249...

CVE-2007-4293: Undefined Security Weakness

Cisco IOS 12.0 through 12.4 allows remote attackers to cause a denial of service device crash via 1 "abnormal" MGCP messages, aka CSCsd81407; and 2 a large facsimile packet, aka CSCej20505...

CISCO IOS NHRP缓冲区溢出漏洞

Cisco IOS是一款流行的网络操作系统。 Cisco IOS包含的NHRP协议存在缓冲区溢出问题，远程攻击者可以利用漏洞对应用协议进行拒绝服务攻击。 NHRP是一款标准用于提供非广播多路访问网络的层二到层三解析的协议。NHRP协议存在未明缓冲区溢出攻击，可导致拒绝服务或任意代码执行攻击。 Cisco IOS 12.4 MR Cisco IOS 12.3 YM Cisco IOS 12.3 YJ Cisco IOS 12.3 BW Cisco IOS 12.2 ZR Cisco IOS 12.2 ZL Cisco IOS 12.2 ZJ Cisco IOS 12.2 ZF Cisco...

[Full-disclosure] Cisco Security Advisory: Voice Vulnerabilities in Cisco IOS and Cisco Unified Communications Manager

Cisco Security Advisory: Voice Vulnerabilities in Cisco IOS and Cisco Unified Communications Manager Advisory ID: cisco-sa-20070808-IOS-voice http://www.cisco.com/warp/public/707/cisco-sa-20070808-IOS-voice.shtml Revision 1.0 For Public Release 2007 August 08 1600 UTC GMT -...

CVE-2007-4291: Undefined Security Weakness

Cisco IOS 12.0 through 12.4 allows remote attackers to cause a denial of service via 1 a malformed MGCP packet, which causes a device hang, aka CSCsf08998; a malformed H.323 packet, which causes a device crash, as identified by 2 CSCsi60004 with Proxy Unregistration and 3 CSCsg70474; and a...

CVE-2007-4295: Undefined Security Weakness

Unspecified vulnerability in Cisco IOS 12.0 through 12.4 allows remote attackers to execute arbitrary code via a malformed SIP packet, aka CSCsi80749...

CVE-2007-4286: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the Next Hop Resolution Protocol NHRP functionality in Cisco IOS 12.0 through 12.4 allows remote attackers to cause a denial of service restart and execute arbitrary code via a crafted NHRP packet...

CVE-2007-4285: Undefined Security Weakness

Unspecified vulnerability in Cisco IOS and Cisco IOS XR 12.x up to 12.3, including some versions before 12.315 and 12.314T, allows remote attackers to obtain sensitive information partial packet contents or cause a denial of service router or component crash via crafted IPv6 packets with a Type 0...

[Full-disclosure] Cisco NHRP denial of service (cisco-sa-20070808-nhrp)

Hi, this exploit/DoS addresses the recent NHRP bug in Cisco IOS CSCin95836 / cisco-sa-20070808-nhrp. The original advisory can be found here: http://www.cisco.com/en/US/products/productssecurityadvisory09186a008089963b.shtml Exploit/DoS: // / / / nhrp-dos - Copyright by Martin Kluge, [email protected] ...