Cisco Catalyst 6000, 6500 and Cisco 7600 Series MPLS Packet Vulnerability

Cisco Catalyst 6500 series systems that are running certain versions of Cisco Internetwork Operating System IOS are vulnerable to an attack from a Multi Protocol Label Switching MPLS packet. Only the systems that are running in Hybrid Mode Catalyst OS CatOS software on the Supervisor Engine and I...

CVE-2010-0576

Unspecified vulnerability in Cisco IOS 12.0 through 12.4, IOS XE 2.1.x through 2.3.x before 2.3.2, and IOS XR 3.2.x through 3.4.3, when Multiprotocol Label Switching MPLS and Label Distribution Protocol LDP are enabled, allows remote attackers to cause a denial of service device reload or process...

CVE-2010-0576

CVE-2010-0576 affects Cisco IOS Software, IOS XE, and IOS XR with MPLS and LDP enabled. A crafted LDP UDP packet can trigger DoS by reloading the device (IOS/IOS XE) or restarting the mpls_ldp process (IOS XR). The vulnerability arises when the device processes LDP hello messages or TDP in MPLS, ...

Cisco routers IOS multiple security vulnerabilities

DoS via TCP connections, multiple vulnerabilities in IPSec, H.323, SIP. SCCP, MPLS protocols...

Cisco Security Advisory: Cisco IOS Software Multiprotocol Label Switching Packet Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco IOS Software Multiprotocol Label Switching Packet Vulnerability Advisory ID: cisco-sa-20100324-ldp Revision 1.0 For Public Release 2010 March 24 1600 UTC GMT...

Cisco IOS Software Multiprotocol Label Switching Packet Vulnerability

A device running Cisco IOS® Software, Cisco IOS XE Software, or Cisco IOS XR Software is vulnerable to a remote denial of service DoS condition if it is configured for Multiprotocol Label Switching MPLS and has support for Label Distribution Protocol LDP. A crafted LDP UDP packet can cause an...

Cisco Security Advisory: Cisco IOS MPLS Forwarding Infrastructure Denial of Service Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco IOS MPLS Forwarding Infrastructure Denial of Service Vulnerability Advisory ID: cisco-sa-20080924-mfi http://www.cisco.com/warp/public/707/cisco-sa-20080924-mfi.shtml Revision 1.0 For Public Release 2008 September 24 160...

Cisco IOS, Cisco 10000, uBR10012, uBR7200 and Cisco UCM multiple security vulnerabilities

DoS with L2TP, MPLS, IPS, SIP, SSL vulnerabilities, information leaks, multiple multicast security vulnerabilities, NAT SCP, IOS Software firewall application inspection security vulnerabilities...

Cisco Security Advisory: Cisco IOS MPLS VPN May Leak Information

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco IOS MPLS VPN May Leak Information Advisory ID: cisco-sa-20080924-vpn http://www.cisco.com/warp/public/707/cisco-sa-20080924-vpn.shtml Revision 1.0 For Public Release 2008 September 24 1600 UTC GMT -...

CVE-2008-3804

Unspecified vulnerability in the Multi Protocol Label Switching MPLS Forwarding Infrastructure MFI in Cisco IOS 12.2 and 12.4 allows remote attackers to cause a denial of service memory corruption via crafted packets for which the software path is used...

CVE-2008-3803

A "logic error" in Cisco IOS 12.0 through 12.4, when a Multiprotocol Label Switching MPLS VPN with extended communities is configured, sometimes causes a corrupted route target RT to be used, which allows remote attackers to read traffic from other VPNs in opportunistic circumstances...

Design/Logic Flaw

A "logic error" in Cisco IOS 12.0 through 12.4, when a Multiprotocol Label Switching MPLS VPN with extended communities is configured, sometimes causes a corrupted route target RT to be used, which allows remote attackers to read traffic from other VPNs in opportunistic circumstances...

Path traversal

Unspecified vulnerability in the Multi Protocol Label Switching MPLS Forwarding Infrastructure MFI in Cisco IOS 12.2 and 12.4 allows remote attackers to cause a denial of service memory corruption via crafted packets for which the software path is used...

CVE-2008-3804

CVE-2008-3804 describes a denial-of-service vulnerability in Cisco IOS’s MPLS Forwarding Infrastructure (MFI). Affects IOS 12.2 and 12.4 devices that have MPLS enabled and use MFI; crafted packets can trigger memory corruption in the software path, causing a reload/DoS. The issue is specific to t...

CVE-2008-3803

CVE-2008-3803 concerns Cisco IOS 12.0S/12.2/12.3/12.4 when MPLS VPNs with extended communities are configured. A logic error in processing extended communities on PE devices can cause a corrupted route target to be used, potentially allowing traffic leakage between VPNs in opportunistic circumsta...

CVE-2008-3803

A "logic error" in Cisco IOS 12.0 through 12.4, when a Multiprotocol Label Switching MPLS VPN with extended communities is configured, sometimes causes a corrupted route target RT to be used, which allows remote attackers to read traffic from other VPNs in opportunistic circumstances...

CVE-2008-3804

Unspecified vulnerability in the Multi Protocol Label Switching MPLS Forwarding Infrastructure MFI in Cisco IOS 12.2 and 12.4 allows remote attackers to cause a denial of service memory corruption via crafted packets for which the software path is used...

Cisco IOS MPLS转发架构远程拒绝服务漏洞

BUGTRAQ ID: 31360 CVE ID: CVE-2008-3804 CNCVE ID：CNCVE-20083804 Cisco IOS是一款流行的网络操作系统。 新版本的Cisco IOS软件中，一种新的报文转发架构提高了可量测性和性能，MFI转发架构针对用户透明。MFI管理用于转发的MPLS数据结构，并用于替代老的LFIB实现。Cisco IOS MFI实现处理特殊构建的报文时存在漏洞，可导致拒绝服务攻击。...

Cisco IOS MPLS Forwarding Infrastructure Denial of Service Vulnerability

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

Cisco IOS MPLS VPN May Leak Information

Devices running Cisco IOS versions 12.0S, 12.2, 12.3 or 12.4 and configured for Multiprotocol Label Switching MPLS Virtual Private Networks VPNs or VPN Routing and Forwarding Lite VRF Lite and using Border Gateway Protocol BGP between Customer Edge CE and Provider Edge PE devices may permit...