1628 matches found
CVE-2010-0137
Unspecified vulnerability in the sshdchildhandler process in the SSH server in Cisco IOS XR 3.4.1 through 3.7.0 allows remote attackers to cause a denial of service process crash and memory consumption via a crafted SSH2 packet, aka Bug ID CSCsu10574...
CVE-2010-0137
Cisco IOS XR SSH DoS (CVE-2010-0137) affects 3.4.1–3.7.0 where the sshd_child_handler can crash on a crafted SSHv2 packet, potentially causing memory exhaustion. Exploitation requires no authentication; memory/availability impact is noted. Cisco PSIRT/Cisco SEC advisory links confirm the vulnerab...
Cisco Buffer Overflow, DDoS Flaws Revealed
Cisco has discovered a buffer overflow in version 2.6 of CiscoWorks Internetwork Performance Monitor IPM and previous versions for Windows; the flaw allows attackers to compromise vulnerable systems remotely, as well as a DDos flaw in Cisco IOS XR. Read the full article. The H Security...
Cisco IOS XR Software SSH Denial of Service Vulnerability
THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...
Cisco Security Advisory: Cisco IOS XR Software SSH Denial of Service Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco IOS XR Software SSH Denial of Service Vulnerability Advisory ID: cisco-sa-20100120-xr-ssh Revision 1.0 For Public Release 2010 January 20 1600 UTC GMT +--------------------------------------------------------------------...
Cisco IOS XR DoS
DoS against SSH server leading to system resource exhaustion...
Path traversal
Cisco IOS XR 3.8.1 and earlier allows remote authenticated users to cause a denial of service process crash via vectors involving a BGP UPDATE message with many AS numbers prepended to the AS path...
CVE-2009-2056
Cisco IOS XR 3.8.1 and earlier allows remote authenticated users to cause a denial of service process crash via vectors involving a BGP UPDATE message with many AS numbers prepended to the AS path...
Design/Logic Flaw
Cisco IOS XR 3.8.1 and earlier allows remote attackers to cause a denial of service process crash via a long BGP UPDATE message, as demonstrated by a message with many AS numbers in the AS Path Attribute...
CVE-2009-1154
Cisco IOS XR 3.8.1 and earlier allows remote attackers to cause a denial of service process crash via a long BGP UPDATE message, as demonstrated by a message with many AS numbers in the AS Path Attribute...
CVE-2009-1154
CVE-2009-1154 affects Cisco IOS XR 3.8.1 and earlier. The issue allows remote attackers to cause a denial of service (process crash) by sending a long BGP UPDATE with many AS numbers in the AS Path Attribute. The connected sources confirm affected versions and the DoS impact; no remediation or fi...
CVE-2009-1154
Cisco IOS XR 3.8.1 and earlier allows remote attackers to cause a denial of service process crash via a long BGP UPDATE message, as demonstrated by a message with many AS numbers in the AS Path Attribute...
CVE-2009-2056
Cisco IOS XR vulnerability CVE-2009-2056 affects Cisco IOS XR software 3.8.1 and earlier. A remote authenticated user can cause a denial of service (process crash) by sending a BGP UPDATE message with many AS numbers prepended to the AS path. The issue is triggered by long AS-path in BGP UPDATEs ...
Cisco IOS XR软件BGP更新拒绝服务漏洞
CVECAN ID: CVE-2009-2055 Cisco IOS是思科网络设备所使用的互联网操作系统。 Cisco IOS XR软件在接收到特定的无效BGP更新时会重置BGP对等端会话。当BGP对等端发布带有特殊无效属性的前缀时会出现这个漏洞。接收到这个前缀后Cisco IOS XR设备会通过发送通知来重启对等端会话，在发送端停止发送无效的破损更新之前对等端会话会震荡。 在接收无效的更新时，接收的Cisco IOS XR软件设备会显示类似于以下的日志消息： RP/0/RP0/CPU0:Aug 17 13:47:05.896 GMT: bgp122:...
CVE-2009-2055
Cisco IOS XR 3.4.0 through 3.8.1 allows remote attackers to cause a denial of service session reset via a BGP UPDATE message with an invalid attribute, as demonstrated in the wild on 17 August 2009...
CVE-2009-2055
Cisco IOS XR 3.4.0 through 3.8.1 allows remote attackers to cause a denial of service session reset via a BGP UPDATE message with an invalid attribute, as demonstrated in the wild on 17 August 2009...
Design/Logic Flaw
Cisco IOS XR 3.4.0 through 3.8.1 allows remote attackers to cause a denial of service session reset via a BGP UPDATE message with an invalid attribute, as demonstrated in the wild on 17 August 2009...
CVE-2009-2055
Cisco IOS XR (Cisco IOS XR software) versions 3.4.0–3.8.1 are affected by a BGP UPDATE handling DoS vulnerability (CVE-2009-2055). The issue allows remote attackers to cause a denial of service by sending a BGP UPDATE with an invalid attribute, resulting in a session reset of the BGP peering. Dem...
CVE-2009-2055
Cisco IOS XR 3.4.0 through 3.8.1 allows remote attackers to cause a denial of service session reset via a BGP UPDATE message with an invalid attribute, as demonstrated in the wild on 17 August 2009...