CVE-2013-1136

The crypto engine process in Cisco IOS on Aggregation Services Router ASR Route Processor 2 does not properly manage memory, which allows local users to cause a denial of service route processor crash by creating multiple tunnels and then examining encryption statistics, aka Bug ID CSCuc52193...

Design/Logic Flaw

The crypto engine process in Cisco IOS on Aggregation Services Router ASR Route Processor 2 does not properly manage memory, which allows local users to cause a denial of service route processor crash by creating multiple tunnels and then examining encryption statistics, aka Bug ID CSCuc52193...

CVE-2013-1136

The crypto engine process in Cisco IOS on Aggregation Services Router ASR Route Processor 2 does not properly manage memory, which allows local users to cause a denial of service route processor crash by creating multiple tunnels and then examining encryption statistics, aka Bug ID CSCuc52193...

CVE-2013-1136

The CVE-2013-1136 entry describes a local denial-of-service vulnerability in Cisco IOS on the Aggregation Services Router (ASR) Route Processor 2 where improper memory management of the crypto engine allows a local attacker to crash the route processor by creating multiple tunnels and then inspec...

CVE-2013-1136: Undefined Security Weakness

The crypto engine process in Cisco IOS on Aggregation Services Router ASR Route Processor 2 does not properly manage memory, which allows local users to cause a denial of service route processor crash by creating multiple tunnels and then examining encryption statistics, aka Bug ID CSCuc52193...

Route Parameter Injection Via Query String in Zend\Mvc

More info at https://framework.zend.com/security/advisory/ZF2013-01...

PT-2013-1583

Name of the Vulnerable Software and Affected Versions HP Access Controller versions affected versions not specified HP Fabric Module versions affected versions not specified HP Firewall versions affected versions not specified HP Router versions affected versions not specified HP Switch versions...

FreeSWITCH Route Header Value Handling DoS

According to its self-reported version, the remote FreeSWITCH install is affected by a denial of service vulnerability in the Sofia SIP stack. A remote attacker can exploit this, via a specially crafted INVITE request with a 'Route' value containing a long list, to crash the service. %NASLMINLEVE...

CVE-2012-5316

Multiple cross-site scripting XSS vulnerabilities in Barracuda Spam & Virus Firewall 600 Firmware 4.0.1.009 and earlier allow remote authenticated users to inject arbitrary web script or HTML via 1 Troubleshooting in the Trace route Device module or 2 LDAP Username in the LDAP Configuration modul...

PT-2012-5915

Name of the Vulnerable Software and Affected Versions Barracuda Spam & Virus Firewall 600 Firmware versions 4.0.1.009 and earlier Description The issue allows remote authenticated users to inject arbitrary web script or HTML via the Troubleshooting in the Trace route Device module or the LDAP...

CVE-2012-5316: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Barracuda Spam & Virus Firewall 600 Firmware 4.0.1.009 and earlier allow remote authenticated users to inject arbitrary web script or HTML via 1 Troubleshooting in the Trace route Device module or 2 LDAP Username in the LDAP Configuration modul...

(bgpd): Assertion failure by processing BGP OPEN message with malformed ORF capability TLV (VU#962587)

The bgpcapabilityorf function in bgpd in Quagga 0.99.20.1 and earlier allows remote attackers to cause a denial of service assertion failure and daemon exit by leveraging a BGP peering relationship and sending a malformed Outbound Route Filtering ORF capability TLV in an OPEN message...

Fedora Update for quagga FEDORA-2012-9103

Check for the Version of quagga OpenVAS Vulnerability Test Fedora Update for quagga FEDORA-2012-9103 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

Cisco IOS MallocLite BGP Update DoS

The remote Cisco IOS device is affected by a denial of service vulnerability due to a flaw in the MallocLite implementation. A remote attacker, via a BGP update message with a specially crafted local-preference attribute length, can cause the route processor to crash, resulting in a denial of...

CVE-2012-1367

The MallocLite implementation in Cisco IOS 12.0, 12.2, 15.0, 15.1, and 15.2 allows remote attackers to cause a denial of service Route Processor crash via a BGP UPDATE message with a modified local-preference aka LOCALPREF attribute length, aka Bug ID CSCtq06538...

CVE-2012-1367: Improper Input Validation

The MallocLite implementation in Cisco IOS 12.0, 12.2, 15.0, 15.1, and 15.2 allows remote attackers to cause a denial of service Route Processor crash via a BGP UPDATE message with a modified local-preference aka LOCALPREF attribute length, aka Bug ID CSCtq06538...

PT-2012-3207

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.0 through 12.2, 15.0 through 15.1, and 15.2 Description The issue allows remote attackers to cause a denial of service, resulting in a Route Processor crash. This can be achieved via a BGP UPDATE message with a modified...

Quagga < 0.99.21 BGP Denial of Service Vulnerability

According to its self-reported version number, the installation of Quagga's BGP daemon listening on the remote host is affected by a denial of service vulnerability. Unauthenticated attackers on the local network can trigger this issue by leveraging a BGP peering relationship and sending a...

Fedora Update for quagga FEDORA-2012-9116

Check for the Version of quagga OpenVAS Vulnerability Test Fedora Update for quagga FEDORA-2012-9116 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

[SECURITY] Fedora 17 Update: quagga-0.99.21-2.fc17

Quagga is free software that operates TCP/IP-based routing protocols. It ta kes a multi-server and multi-threaded approach to resolving the current complex ity of the Internet. Quagga supports Babel, BGP4, BGP4+, BGP4-, IS-IS experimental, OSPFv2, OSPFv3, RIPv1, RIPv2, and RIPng. Quagga is intend...