Cisco PGW Softswitch产品SIP和MGCP报文处理拒绝服务漏洞

BUGTRAQ ID: 40117,40120,40121,40122,40123,40124,40125,40126,40128 CVECAN ID: CVE-2010-0601,CVE-2010-0602,CVE-2010-0603,CVE-2010-0604,CVE-2010-1561,CVE-2010-1562,CVE-2010-1563,CVE-2010-1567,CVE-2010-1565 PGW 2200是运营商级的软件交换机，可在NGN和IMS基础架构中用于执行呼叫控制。 PGW...

CVE-2010-0601

The MGCP implementation on the Cisco PGW 2200 Softswitch with software before 9.73S11 allows remote attackers to cause a denial of service device crash via a malformed packet, aka Bug ID CSCsl39126...

Information disclosure

The MGCP implementation on the Cisco PGW 2200 Softswitch with software before 9.73S11 allows remote attackers to cause a denial of service device crash via a malformed packet, aka Bug ID CSCsl39126...

CVE-2010-0601

The CVE-2010-0601 entry relates to the Cisco PGW 2200 Softswitch. The connected documents specify DoS via malformed MGCP/SIP packets that can crash the device or cause DoS by preventing new TCP connections. Affected product: Cisco PGW 2200 Softswitch; vulnerable components: MGCP and SIP handling ...

CVE-2010-0601

The MGCP implementation on the Cisco PGW 2200 Softswitch with software before 9.73S11 allows remote attackers to cause a denial of service device crash via a malformed packet, aka Bug ID CSCsl39126...

Cisco Security Advisory: Multiple vulnerabilities in Cisco PGW Softswitch

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Multiple vulnerabilities in Cisco PGW Softswitch Document ID: 111870 Advisory ID: cisco-sa-20100512-pgw http://www.cisco.com/warp/public/707/cisco-sa-20100512-pgw.shtml Revision 1.0 For Public Release 2010 May 12 1600 UTC GMT -...

Design/Logic Flaw

Unspecified vulnerability in Cisco IOS 12.0 through 12.4, when configured with 1 IP Service Level Agreements SLAs Responder, 2 Session Initiation Protocol SIP, 3 H.323 Annex E Call Signaling Transport, or 4 Media Gateway Control Protocol MGCP allows remote attackers to cause a denial of service...

CVE-2009-0631

Cisco IOS 12.0–12.4 is affected when configured with (1) SLAs Responder, (2) SIP, (3) H.323 Annex E Call Signaling Transport, or (4) MGCP. A crafted UDP packet can cause the input queue on the inbound interface to become blocked, resulting in a denial of service. The connected sources confirm the...

Media Gateway Control Protocol (MGCP) Client Detection

Binary data 4933.prm...

Media Gateway Control Protocol (MGCP) Server Detection

Binary data 4931.prm...

Cisco IOS双栈路由器IPv6拒绝服务漏洞

BUGTRAQ ID: 28461 CVECAN ID: CVE-2008-1153 Cisco IOS是思科网络设备中所使用的互联网操作系统。 运行Cisco IOS软件的设备如果启用了IPv6，就会受拒绝服务攻击影响。设备必须还要启用了IPv4 UDP服务才会受这个漏洞影响。如果要利用这个漏洞，攻击IPv6报文必须指向设备，通过路由器路由的报文不会触发这个漏洞。成功利用这个漏洞可能导致以下情况之一： 1. 如果接口上配置了RSVP服务则设备会崩溃。 2. 任何其他受影响的基于IPv4 UDP的服务会导致接口无法接收更多的通讯，仅有利用漏洞端口才会受影响。...

Code injection

Cisco PIX and ASA appliances with 7.0 through 8.0 software, and Cisco Firewall Services Module FWSM 3.15 and earlier, allow remote attackers to cause a denial of service device reload via a crafted MGCP packet, aka CSCsi90468 appliance and CSCsi00694 FWSM...

CVE-2007-5568

Cisco PIX and ASA appliances with 7.0 through 8.0 software, and Cisco Firewall Services Module FWSM 3.15 and earlier, allow remote attackers to cause a denial of service device reload via a crafted MGCP packet, aka CSCsi90468 appliance and CSCsi00694 FWSM...

Cisco Security Advisory: Multiple Vulnerabilities in Cisco PIX and ASA Appliances

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Multiple Vulnerabilities in Cisco PIX and ASA Appliances Advisory ID: cisco-sa-20071017-asa http://www.cisco.com/warp/public/707/cisco-sa-20071017-asa.shtml Revision 1.0 For Public Release 2007 October 17 1600 UTC GMT...

Cisco Security Advisory: Multiple Vulnerabilities in Firewall Services Module

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Multiple Vulnerabilities in Firewall Services Module Advisory ID: cisco-sa-20071017-fwsm http://www.cisco.com/warp/public/707/cisco-sa-20071017-fwsm.shtml Revision 1.0 For Public Release 2007 October 17 1600 UTC GMT...

CVE-2007-4291

Cisco IOS 12.0 through 12.4 allows remote attackers to cause a denial of service via 1 a malformed MGCP packet, which causes a device hang, aka CSCsf08998; a malformed H.323 packet, which causes a device crash, as identified by 2 CSCsi60004 with Proxy Unregistration and 3 CSCsg70474; and a...

Code injection

Cisco IOS 12.0 through 12.4 allows remote attackers to cause a denial of service device crash via 1 "abnormal" MGCP messages, aka CSCsd81407; and 2 a large facsimile packet, aka CSCej20505...

Memory corruption

Cisco IOS 12.0 through 12.4 allows remote attackers to cause a denial of service via 1 a malformed MGCP packet, which causes a device hang, aka CSCsf08998; a malformed H.323 packet, which causes a device crash, as identified by 2 CSCsi60004 with Proxy Unregistration and 3 CSCsg70474; and a...

CVE-2007-4293

Cisco IOS 12.0 through 12.4 allows remote attackers to cause a denial of service device crash via 1 "abnormal" MGCP messages, aka CSCsd81407; and 2 a large facsimile packet, aka CSCej20505...

CVE-2007-4293

Cisco IOS 12.0–12.4 is affected by CVE-2007-4293. The vulnerability allows remote attackers to trigger a denial of service (device crash) by sending specific MGCP messages (abnormal) or by transmitting a large facsimile packet. The issue is tied to two prompts: CSCsd81407 (abnormal MGCP) and CSCe...