Cisco IOS Software Session Initiation Protocol Denial of Service Vulnerability

A vulnerability exists in the Session Initiation Protocol SIP implementation in Cisco IOS Software and Cisco IOS XE Software that could allow an unauthenticated, remote attacker to cause an affected device to reload. Affected devices must be configured to process SIP messages and for pass-through...

Code injection

Cisco IOS 15.1 and 15.2 and IOS XE 3.x, when configured as an IPsec hub with X.509 certificates in use, allows remote authenticated users to cause a denial of service segmentation fault and device crash via unspecified vectors, aka Bug ID CSCtq61128...

CVE-2011-4007

Cisco IOS 15.0 and 15.1 and IOS XE 3.x do not properly handle the "set mpls experimental imposition" command, which allows remote attackers to cause a denial of service device crash via network traffic that triggers 1 fragmentation or 2 reassembly, aka Bug ID CSCtr56576...

Cisco IOS Software RSVP Denial of Service Vulnerability (cisco-sa-20120328-rsvp)

Cisco IOS Software and Cisco IOS XE Software contain a vulnerability in the RSVP feature when used on a device configured with VPN routing and forwarding VRF instances. An unauthenticated, remote attacker can exploit this to cause an interface wedge, which can lead to loss of connectivity, loss o...

CVE-2012-0384

Cisco IOS 12.2 through 12.4 and 15.0 through 15.2 and IOS XE 2.1.x through 2.6.x and 3.1.xS before 3.1.2S, 3.2.xS through 3.4.xS before 3.4.2S, 3.5.xS before 3.5.1S, and 3.1.xSG and 3.2.xSG before 3.2.2SG, when AAA authorization is enabled, allow remote authenticated users to bypass intended acce...

Code injection

The IKEv1 implementation in Cisco IOS 12.2 through 12.4 and 15.0 through 15.2 and IOS XE 2.1.x through 2.6.x and 3.1.xS through 3.4.xS before 3.4.2S, 3.5.xS before 3.5.1S, and 3.2.xSG before 3.2.2SG allows remote attackers to cause a denial of service device reload by sending IKE UDP packets over...

Design/Logic Flaw

The RSVP feature in Cisco IOS 15.0 and 15.1 and IOS XE 3.2.xS through 3.4.xS before 3.4.2S, when a VRF interface is configured, allows remote attackers to cause a denial of service interface queue wedge and service outage via crafted RSVP packets, aka Bug ID CSCts80643...

CVE-2012-0384

Summary: CVE-2012-0384 maps to a Cisco IOS/IOS XE authentication bypass vulnerability where, if AAA authorization is enabled and the HTTP/HTTPS server is active, a remote, authenticated user can bypass access restrictions and execute commands at the user’s authorization level. Affected software i...

CVE-2012-1311

CVE-2012-1311 concerns Cisco IOS Software and IOS XE with RSVP enabled on VRF configurations. Affected releases include Cisco IOS 15.0/15.1 and IOS XE 3.2.xS–3.4.xS (pre-3.4.2S). A remote, unauthenticated attacker can craft RSVP packets to trigger an interface queue wedge, causing loss of connect...

CVE-2012-0384

Cisco IOS 12.2 through 12.4 and 15.0 through 15.2 and IOS XE 2.1.x through 2.6.x and 3.1.xS before 3.1.2S, 3.2.xS through 3.4.xS before 3.4.2S, 3.5.xS before 3.5.1S, and 3.1.xSG and 3.2.xSG before 3.2.2SG, when AAA authorization is enabled, allow remote authenticated users to bypass intended acce...

Oracle XDB.XDB_PITRIG_PKG.PITRIG_DROPMETADATA Procedure Exploit

Exploit for windows platform in category remote exploits Exploit Title: New exploit to Oracle CVE-2007-4517 vulnerability Date: 11,2,2011 Author: David Maman and the GreenSQL Team Software Link: http://blog.greensql.com/2011/11/02/new-exploit-to-oracle-vulnerability/ Version: 0.1 Tested on: Oracl...

Code injection

Unspecified vulnerability in Cisco IOS 12.2SRE before 12.233SRE4, 15.0, and 15.1, and IOS XE 2.1.x through 3.3.x, when an MPLS domain is configured, allows remote attackers to cause a denial of service device reload via an ICMPv6 packet, related to an expired MPLS TTL, aka Bug ID CSCtj30155...

Memory corruption

Memory leak in Cisco IOS 12.4, 15.0, and 15.1, and IOS XE 2.5.x through 3.2.x, allows remote attackers to cause a denial of service memory consumption via a crafted SIP message, aka Bug ID CSCti48504...

Code injection

The NAT implementation in Cisco IOS 12.1 through 12.4 and 15.0 through 15.1, and IOS XE 3.1.xSG, allows remote attackers to cause a denial of service device reload or hang via malformed NetMeeting Directory aka Internet Locator Service or ILS LDAP traffic, aka Bug ID CSCtd10712...

CVE-2011-3279

The provider-edge MPLS NAT implementation in Cisco IOS 12.1 through 12.4 and 15.0 through 15.1, and IOS XE 3.1.xSG, allows remote attackers to cause a denial of service device reload via a malformed SIP packet to UDP port 5060, aka Bug ID CSCti98219...

CVE-2011-0946

CVE-2011-0946 involves a vulnerability in Cisco IOS/NAT where NAT for NetMeeting Directory (LDAP) can be triggered by malformed LDAP traffic, causing a DoS (device reload or hang). Affected are Cisco IOS releases 12.1–12.4 and 15.0–15.1, plus IOS XE 3.1.xSG. The weakness is within the NAT transla...

CVE-2011-3277

CVE-2011-3277 affects Cisco IOS NAT implementation (12.1–12.4, 15.0–15.1) and IOS-XE 3.1.xSG. The issue arises from NAT handling of H.323 traffic on TCP/1720, enabling remote attackers to cause a DoS (device reload). Cisco’s advisory notes multiple NAT DoS vectors (including H.323), with mitigati...

CVE-2011-3272

CVE-2011-3272 concerns Cisco IOS/IP SLA. Affected: Cisco IOS 15.1 and IOS XE 2.1.x–3.3.x where IP SLA processing can be triggered by malformed IP SLA UDP packets. Root cause: memory corruption leading to device reload (DoS) when IP SLA control/operations receive crafted traffic (Bug CSCtk67073). ...

DarkComet-RAT v4.0 Fix1 Released - Fully Cryptable

DarkComet-RAT v4.0 Fix1 Released - Fully Cryptable DarkComet-RAT v4.0 Change log - DarkComet-RAT is now compiled on Delphi XE instead of Delphi 2010. - Synthax highlighter added in remote keylogger. - Multithreading is now more efficient, no more freezing, using a new powerfull and stable...

Embarcadero Delphi XE (2011) DLL preloading exploit

Exploit for windows platform in category local exploits =================================================== Embarcadero Delphi XE 2011 DLL preloading exploit =================================================== Exploit Title : Embarcadero Delphi XE 2011, DLL preloading exploit Author : STRELiTZIA...