871 matches found
Code injection
The SIP implementation on the Cisco PGW 2200 Softswitch with software before 9.81S5 allows remote attackers to cause a denial of service device crash via a malformed header, aka Bug ID CSCsz13590...
Code injection
The SIP implementation on the Cisco PGW 2200 Softswitch with software 9.73S before 9.73S11 and 9.73P before 9.73P11 allows remote attackers to cause a denial of service device crash via a long message, aka Bug ID CSCsk44115...
Code injection
The SIP implementation on the Cisco PGW 2200 Softswitch with software 9.73S before 9.73S9 and 9.73P before 9.73P9 allows remote attackers to cause a denial of service device crash via a malformed Contact header, aka Bug ID CSCsj98521...
CVE-2010-0603
The SIP implementation on the Cisco PGW 2200 Softswitch with software before 9.73S10 allows remote attackers to cause a denial of service device crash via a malformed session attribute, aka Bug ID CSCsk40030...
CVE-2010-1562
CVE-2010-1562 affects Cisco PGW 2200 Softswitch SIP MGCP processing. The vulnerability, described in Cisco advisory cisco-sa-20100512-pgw and linked CVE CSCsj98521, allows remote attackers to cause a device crash (DoS) by sending malformed SIP/Contact headers. Affected software versions include C...
CVE-2010-1567
The Cisco PGW 2200 Softswitch SIP MGCP stack is affected by CVE-2010-1567 (and related CVEs) as described in Cisco advisory cisco-sa-20100512-pgw. The vulnerability arises from malformed SIP header handling in the SIP implementation, enabling remote attackers to cause a device crash (DoS). The is...
CVE-2010-1561: Improper Input Validation
The SIP implementation on the Cisco PGW 2200 Softswitch with software 9.73S before 9.73S11 and 9.73P before 9.73P11 allows remote attackers to cause a denial of service device crash via a long message, aka Bug ID CSCsk44115...
CVE-2010-0601: Improper Input Validation
The MGCP implementation on the Cisco PGW 2200 Softswitch with software before 9.73S11 allows remote attackers to cause a denial of service device crash via a malformed packet, aka Bug ID CSCsl39126...
CVE-2010-0603: Improper Input Validation
The SIP implementation on the Cisco PGW 2200 Softswitch with software before 9.73S10 allows remote attackers to cause a denial of service device crash via a malformed session attribute, aka Bug ID CSCsk40030...
CVE-2010-0604: Undefined Security Weakness
Unspecified vulnerability in the SIP implementation on the Cisco PGW 2200 Softswitch with software before 9.73S10 allows remote attackers to cause a denial of service device crash via unknown SIP traffic, as demonstrated by "SIP testing," aka Bug ID CSCsk38165...
CVE-2010-1563: Improper Input Validation
The SIP implementation on the Cisco PGW 2200 Softswitch with software 9.73S before 9.73S9 and 9.73P before 9.73P9 allows remote attackers to cause a denial of service device crash via a malformed header, aka Bug ID CSCsk04588...
CVE-2010-1562: Improper Input Validation
The SIP implementation on the Cisco PGW 2200 Softswitch with software 9.73S before 9.73S9 and 9.73P before 9.73P9 allows remote attackers to cause a denial of service device crash via a malformed Contact header, aka Bug ID CSCsj98521...
CVE-2009-0628
Memory leak in the SSLVPN feature in Cisco IOS 12.3 through 12.4 allows remote attackers to cause a denial of service memory consumption and device crash by disconnecting an SSL session in an abnormal manner, leading to a Transmission Control Block TCB leak...
Design/Logic Flaw
Memory leak in the Cisco Tunneling Control Protocol cTCP encapsulation feature in Cisco IOS 12.4, when an Easy VPN aka EZVPN server is enabled, allows remote attackers to cause a denial of service memory consumption and device crash via a sequence of TCP packets...
CVE-2009-0635
Memory leak in the Cisco Tunneling Control Protocol cTCP encapsulation feature in Cisco IOS 12.4, when an Easy VPN aka EZVPN server is enabled, allows remote attackers to cause a denial of service memory consumption and device crash via a sequence of TCP packets...
CVE-2009-0636: Undefined Security Weakness
Unspecified vulnerability in Cisco IOS 12.0 through 12.4, when SIP voice services are enabled, allows remote attackers to cause a denial of service device crash via a valid SIP message...
CVE-2008-6395
The web management interface in 3Com Wireless 8760 Dual Radio 11a/b/g PoE Access Point allows remote attackers to cause a denial of service device crash via a malformed HTTP POST request...
Directory traversal
cgi-bin/welcome/VPNonly in the web interface in Netgear SSL312 allows remote attackers to cause a denial of service device crash via a crafted query string, as demonstrated using directory traversal sequences...
Nokia N95 / Nokia E90 DoS
Device crashes on malformed JPEG parsing...
Code injection
Unspecified vulnerability in the Wireless LAN Controller WLC TSEC driver in the Cisco 4400 WLC, Cisco Catalyst 6500 and 7600 Wireless Services Module WiSM, and Cisco Catalyst 3750 Integrated Wireless LAN Controller with software 4.x before 4.2.176.0 and 5.x before 5.1 allows remote attackers to...