Cisco IOS Next Hop Resolution Protocol (NHRP) - Denial of Service

Cisco IOS Next Hop Resolution Protocol NHRP - Denial of Service // / / / nhrp-dos - Copyright by Martin Kluge, / / / / Feel free to modify this code as you like, as long as you include the / / above copyright statement. / / / / Please use this code only to check your OWN cisco routers. / / / /...

Cisco IOS fails to properly handle Next Hop Resolution Protocol packets

Overview Cisco IOS fails to properly handle Next Hop Resolution Protocol packets, which could allow a remote, unauthenticated attacker to execute arbitrary code or cause a denial of service. Description Cisco IOS is an operating system that is used on Cisco network devices. Cisco IOS supports a...

CVE-2007-4263: Undefined Security Weakness

Unspecified vulnerability in the server side of the Secure Copy SCP implementation in Cisco 12.2-based IOS allows remote authenticated users to read, write or overwrite any file on the device's filesystem via unknown vectors...

Cisco Security Advisory: Vulnerability In Crypto Library

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Vulnerability In Crypto Library Advisory ID: cisco-sa-20070522-crypto.shtml http://www.cisco.com/warp/public/707/cisco-sa-20070522-crypto.shtml Revision 1.0 For Public Release 2007 May 22 1300 UTC GMT -...

RSA BSAFE库远程ASN.1解析拒绝服务漏洞

RSA BSAFE产品可为开发人员提供软件函数库，用于在各种嵌入的Internet应用中实现加密。 RSA BSAFE所提供的Crypto-C和Cert-C库的实现上存在漏洞，远程攻击者可能利用此漏洞导致设备拒绝服务。 如果用户通过任何使用了上述库的应用程序解析了畸形的ASN.1对象的话，就会触发这个漏洞，导致受影响的应用或设备崩溃。 Cisco IOS XR 3.4.X Cisco IOS XR 3.3.X Cisco IOS XR 3.2.X Cisco IOS 12.4 Cisco IOS 12.3 Cisco IOS 12.2 Cisco Firewall Services...

Multiple Vulnerabilities in Cisco IOS While Processing SSL Packets

Cisco IOS device may crash while processing malformed Secure Sockets Layer SSL packets. In order to trigger these vulnerabilities, a malicious client must send malformed packets during the SSL protocol exchange with the vulnerable device. Successful repeated exploitation of any of these...

CVE-2007-2813: Undefined Security Weakness

Cisco IOS 12.4 and earlier, when using the crypto packages and SSL support is enabled, allows remote attackers to cause a denial of service via a malformed 1 ClientHello, 2 ChangeCipherSpec, or 3 Finished message during an SSL session...

CVE-2007-2587

The IOS FTP Server in Cisco IOS 11.3 through 12.4 allows remote authenticated users to cause a denial of service IOS reload via unspecified vectors involving transferring files aka bug ID CSCse29244...

CVE-2007-2586: Incorrect Authorization

The FTP Server in Cisco IOS 11.3 through 12.4 does not properly check user authorization, which allows remote attackers to execute arbitrary code, and have other impact including reading startup-config, as demonstrated by a crafted MKD command that involves access to a VTY device and overflows a...

CVE-2007-2587: Undefined Security Weakness

The IOS FTP Server in Cisco IOS 11.3 through 12.4 allows remote authenticated users to cause a denial of service IOS reload via unspecified vectors involving transferring files aka bug ID CSCse29244...

CVE-2007-1258: Undefined Security Weakness

Unspecified vulnerability in Cisco IOS 12.2SXA, SXB, SXD, and SXF; and the MSFC2, MSFC2a and MSFC3 running in Hybrid Mode on Cisco Catalyst 6000, 6500 and Cisco 7600 series systems; allows remote attackers on a local network segment to cause a denial of service software reload via a certain MPLS...

Design/Logic Flaw

The ATOMIC.TCP signature engine in the Intrusion Prevention System IPS feature for Cisco IOS 12.4XA, 12.3YA, 12.3T, and other trains allows remote attackers to cause a denial of service IPS crash and traffic loss via unspecified manipulations that are not properly handled by the regular expressio...

Authentication flaw

The Intrusion Prevention System IPS feature for Cisco IOS 12.4XE to 12.3T allows remote attackers to bypass IPS signatures that use regular expressions via fragmented packets...

CVE-2007-0917

The Intrusion Prevention System IPS feature for Cisco IOS 12.4XE to 12.3T allows remote attackers to bypass IPS signatures that use regular expressions via fragmented packets...

CVE-2007-0918

The ATOMIC.TCP signature engine in the Intrusion Prevention System IPS feature for Cisco IOS 12.4XA, 12.3YA, 12.3T, and other trains allows remote attackers to cause a denial of service IPS crash and traffic loss via unspecified manipulations that are not properly handled by the regular expressio...

CVE-2007-0917: Undefined Security Weakness

The Intrusion Prevention System IPS feature for Cisco IOS 12.4XE to 12.3T allows remote attackers to bypass IPS signatures that use regular expressions via fragmented packets...

CVE-2007-0918: Undefined Security Weakness

The ATOMIC.TCP signature engine in the Intrusion Prevention System IPS feature for Cisco IOS 12.4XA, 12.3YA, 12.3T, and other trains allows remote attackers to cause a denial of service IPS crash and traffic loss via unspecified manipulations that are not properly handled by the regular expressio...

Multiple IOS IPS Vulnerabilities

The Intrusion Prevention System IPS feature set of Cisco IOS® contains several vulnerabilities. These include: Fragmented IP packets may be used to evade signature inspection. IPS signatures utilizing the regular expression feature of the ATOMIC.TCP signature engine may cause a router to crash...

CVE-2007-0648: Undefined Security Weakness

Cisco IOS after 12.314T, 12.38YC1, 12.38YG, and 12.4, with voice support and without Session Initiated Protocol SIP configured, allows remote attackers to cause a denial of service crash by sending a crafted packet to port 5060/UDP...

CVE-2005-4826: Undefined Security Weakness

Unspecified vulnerability in the VLAN Trunking Protocol VTP feature in Cisco IOS 12.122EA3 on Catalyst 2950T switches allows remote attackers to cause a denial of service device reboot via a crafted Subset-Advert message packet, a different issue than CVE-2006-4774, CVE-2006-4775, and CVE-2006-47...