Cisco IOS Secure Shell Denial of Service Vulnerabilities

The Secure Shell server SSH implementation in Cisco IOS contains multiple vulnerabilities that allow unauthenticated users the ability to generate a spurious memory access error or, in certain cases, reload the device. The IOS SSH server is an optional service that is disabled by default, but its...

CVE-2007-5651

Unspecified vulnerability in the Extensible Authentication Protocol EAP implementation in Cisco IOS 12.3 and 12.4 on Cisco Access Points and 1310 Wireless Bridges Wireless EAP devices, IOS 12.1 and 12.2 on Cisco switches Wired EAP devices, and CatOS 6.x through 8.x on Cisco switches allows remote...

Cisco IOS Data-link Switching DoS

Device reload on malformed DLSw message parsing...

DLSw Vulnerability

A vulnerability exists in the Data-link Switching DLSw feature in Cisco IOS where an invalid value in a DLSw message could result in a reload of the DLSw device. Successful exploitation of this vulnerability requires that an attacker be able to establish a DLSw connection to the device. There are...

Design/Logic Flaw

Unspecified vulnerability in the HTTP compression functionality in Cisco CSS 11500 Series Content Services switches allows remote attackers to cause a denial of service device reload via 1 "valid, but obsolete" or 2 "specially crafted" HTTP requests...

CVE-2006-1631

The CVE-2006-1631 entry refers to a vulnerability in Cisco 11500 Series Content Services switches where the HTTP compression feature can be abused to trigger a denial-of-service (device reload) by sending certain HTTP requests (either valid but obsolete or specially crafted). Exploitation details...

CVE-2005-3426

Cisco CSS 11500 Content Services Switch CSS with SSL termination services allows remote attackers to cause a denial of service memory corruption and device reload via a malformed client certificate during SSL session negotiation...

CVE-2005-3426

Cisco CSS 11500 Content Services Switch CSS with SSL termination services allows remote attackers to cause a denial of service memory corruption and device reload via a malformed client certificate during SSL session negotiation...

CVE-2005-3426

Cisco CSS 11500 Content Services Switch (CSS) with SSL termination services is affected by CVE-2005-3426. The vulnerability allows remote attackers to trigger a denial of service via memory corruption during SSL session negotiation when a malformed client certificate is presented. The entry notes...

CVE-2005-1020

Secure Shell SSH 2 in Cisco IOS 12.0 through 12.3 allows remote attackers to cause a denial of service device reload 1 via a username that contains a domain name when using a TACACS+ server to authenticate, 2 when a new SSH session is in the login phase and a currently logged in user issues a sen...

CVE-2004-1454

Cisco IOS CVE-2004-1454 affects IOS trains based on 12.0S, 12.2, and 12.3 where OSPF is enabled. A malformed OSPF packet can be used by a remote attacker to cause a denial of service (device reload). Several sources corroborate that the vulnerability arises from OSPF packet handling and that the ...

CVE-2005-0197

Cisco IOS 12.1T, 12.2, 12.2T, 12.3 and 12.3T, with Multi Protocol Label Switching MPLS installed but disabled, allows remote attackers to cause a denial of service device reload via a crafted packet sent to the disabled interface...

CVE-2005-0196

Cisco IOS 12.0 through 12.3YL, with BGP enabled and running the bgp log-neighbor-changes command, allows remote attackers to cause a denial of service device reload via a malformed BGP packet...

Cisco IOS contains DoS vulnerability in MPLS packet processing

Overview A denial-of-service vulnerability exists in Cisco's Internetwork Operating System IOS. This vulnerability may allow attackers to conduct denial-of-service attacks on an affected device. Description Multi Protocol Label Switching MPLS is designed to increase the speed of IP...

Cisco IOS Malformed OSPF Packet Causes Reload

...

CVE-2004-0589

Cisco IOS 11.1x through 11.3x and 12.0x through 12.2x, when configured for BGP routing, allows remote attackers to cause a denial of service device reload via malformed BGP 1 OPEN or 2 UPDATE messages...

PT-2004-1685 · Cisco · Cisco Ios +1

Name of the Vulnerable Software and Affected Versions: Cisco IOS versions 11.1x through 11.3x Cisco IOS versions 12.0x through 12.2x Description: The issue allows remote attackers to cause a denial of service, resulting in a device reload, via malformed BGP OPEN or UPDATE messages. A Cisco device...

Cisco Security Advisory: Vulnerabilities in SNMP Message Processing

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Vulnerabilities in SNMP Message Processing Revision 1.0 INTERIM For Public Release 2004 April 20 UTC 2100 - ----------------------------------------------------------------------- Contents ======== Summary Affected Products...

Cisco Aironet AP1x00 - GET Denial of Service

source: https://www.securityfocus.com/bid/8290/info Cisco Aironet AP1x00 series devices are prone to a denial of service vulnerability upon receipt of a malformed HTTP GET request. Such a request will cause the device to reload. !/usr/bin/perl Cisco Global Exploiter Legal notes : The BlackAngels...

Cisco VPN 3000 Series Concentrator Client - Authentication Denial of Service

Cisco VPN 3000 Series Concentrator Client - Authentication Denial of Service // source: https://www.securityfocus.com/bid/5620/info Cisco VPN 3000 series concentrators are prone to a denial of service condition when receiving an overly long username string during authentication from a VPN client...