Cisco IOS Firewall CBAC ACL Bypass (CSCdv48261)

The IOS Firewall Feature set, also known as Cisco Secure Integrated Software, also known as Context Based Access Control CBAC, and introduced in IOS version 11.2P, has a vulnerability that permits traffic normally expected to be denied by the dynamic access control lists. An attacker may use this...

Cisco IOS Cisco Express Forwarding (CEF) Previous Packet Information Disclosure (CSCdu20643)

If the remote device has Cisco Express Forwarding CEF enabled, it may leak information from previous packets that have been handled by the device. An attacker may use this flaw to sniff your network remotely. This vulnerability is documented as Cisco Bug ID CSCdu20643. C Tenable Network Security,...

Cisco IOS ICMP redirects DoS

ICMP redirect flood causes memory exhaustion...

Cisco IOS ICMP redirect DoS

Phenoelit Advisory wir-haben-auch-mal-was-gefunden 0815++++ Authors FX [email protected] FtR [email protected] kim0 [email protected] Phenoelit Group http://www.phenoelit.de Affected Products Cisco IOS - several versions Known vulnerable combinations: Cisco 1005 IOS 11.018 Cisco 1603 IOS 11.311b Cis...

Cisco IOS ICMP redirect DoS - Cisco's response

-----BEGIN PGP SIGNED MESSAGE----- Hello, We can confirm the finding made by [email protected]. This issue is assigned Cisco bug ID CSCdx32056. The fix has been developed and it is being committed into all affected releases. The situation in Cisco IOS 12.x code is that the redirect cache will only...

Cisco IOS 11.x12.0 - ICMP Redirect Denial of Service

Cisco IOS 11.x12.0 - ICMP Redirect Denial of Service source: https://www.securityfocus.com/bid/4786/info IOS is the Internet Operating System, used on Cisco routers. It is distributed and maintained by Cisco. It has been reported that it is possible to cause a denial of service in some Cisco...

Cisco Security Advisory: NTP vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Cisco Security Advisory: NTP Vulnerability ========================================== Revision 1.0 For Public Release 2002 May 08 16:00 UTC+0000 - ---------------------------------------------------------------------------- Summary ======= Network Time Protocol...

CVE-1999-1175

The CVE-1999-1175 entry concerns Cisco’s Web Cache Control Protocol (WCCP) in Cisco Cache Engine on Cisco IOS 11.2 and earlier. The root cause is that WCCP does not use authentication, allowing a remote attacker to divert HTTP traffic to arbitrary hosts by sending valid WCCP packets to UDP port 2...

CVE-2001-0750

Cisco IOS 12.12T, 12.13T allow remote attackers to cause a denial of service reload via a connection to TCP ports 3100-3999, 5100-5999, 7100-7999 and 10100-10999...

CVE-2001-0537

HTTP server for Cisco IOS 11.3 to 12.2 allows attackers to bypass authentication and execute arbitrary commands, when local authorization is being used, by specifying a high access level in the URL...

CVE-2001-0650

Cisco devices IOS 12.0 and earlier allow a remote attacker to cause a crash, or bad route updates, via malformed BGP updates with unrecognized transitive attribute...

CVE-1999-1175

Web Cache Control Protocol WCCP in Cisco Cache Engine for Cisco IOS 11.2 and earlier does not use authentication, which allows remote attackers to redirect HTTP traffic to arbitrary hosts via WCCP packets to UDP port 2048...

CVE-1999-1175: Undefined Security Weakness

Web Cache Control Protocol WCCP in Cisco Cache Engine for Cisco IOS 11.2 and earlier does not use authentication, which allows remote attackers to redirect HTTP traffic to arbitrary hosts via WCCP packets to UDP port 2048...

CVE-2001-0750: Undefined Security Weakness

Cisco IOS 12.12T, 12.13T allow remote attackers to cause a denial of service reload via a connection to TCP ports 3100-3999, 5100-5999, 7100-7999 and 10100-10999...

CVE-2001-0537: Improper Authentication

HTTP server for Cisco IOS 11.3 to 12.2 allows attackers to bypass authentication and execute arbitrary commands, when local authorization is being used, by specifying a high access level in the URL...

Cisco IOS discloses fragments of previous packets when Express Forwarding is enabled

Overview A vulnerability exists in multiple versions of Cisco's Internetworking Operating System IOS software that allows an attacker to collect fragments of previously processed packets. Description Many networking devices running Cisco IOS with Cisco Express Forwarding CEF enabled contain a...

Cisco Security Advisory: Data Leak with Cisco Express Forwarding

-----BEGIN PGP SIGNED MESSAGE----- Cisco Security Advisory: Data Leak with Cisco Express Forwarding Enabled Revision 1.0 For Public Release 2002 February 27 08:00 UTC -0800 - -------------------------------------------------------------------------- Summary ======= All Cisco devices running Cisco...

Cisco IOS 11/12 - SNMP Message Denial of Service

// source: https://www.securityfocus.com/bid/4132/info Cisco products contain multiple vulnerabilities in handling of SNMP requests and traps. A general report for multiple vendors was initially published on February 12 Bugtraq IDs 4088 and 4089, however more information is now available and a...

Cisco IOS 1112 - SNMP Message Denial of Service

Cisco IOS 1112 - SNMP Message Denial of Service // source: https://www.securityfocus.com/bid/4132/info Cisco products contain multiple vulnerabilities in handling of SNMP requests and traps. A general report for multiple vendors was initially published on February 12 Bugtraq IDs 4088 and 4089,...

CVE-2001-0863

Cisco 12000 with IOS 12.0 and line cards based on Engine 2 does not handle the "fragment" keyword in a compiled ACL Turbo ACL for packets that are sent to the router, which allows remote attackers to cause a denial of service via a flood of fragments...