Cisco IOS XR Software Border Gateway Protocol Vulnerabilities

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in multiple Century Systems routers including XR-410 before 1.6.9, XR-510 before 3.5.3, XR-440 before 1.7.8, and other XR series routers from XR-510 to XR-730 allows remote attackers to modify configuration as the administrator via unknown vectors...

Cisco Security Advisory: Cisco 7600 Series Router Session Border Controller Denial of Service Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco 7600 Series Router Session Border Controller Denial of Service Vulnerability Document ID: 109483 Advisory ID: cisco-sa-20090304-sbc http://www.cisco.com/warp/public/707/cisco-sa-20090304-sbc.shtml Revision 1.0 For Public...

Multiple Century Systems routers vulnerable to cross-site request forgery

Overview The web interface in multiple Century Systems routers is vulnerable to cross-site request forgery. Multiple Century Systems Co., Ltd. routers provide a web-based interface for users to configure the routers. The web interface is vulnerable to cross-site request forgery. Hirotaka Katagiri...

JVN#67573833 Multiple Century Systems routers vulnerable to cross-site request forgery

Multiple Century Systems Co., Ltd. routers provide a web-based interface for users to configure the routers. The web interface is vulnerable to cross-site request forgery. Impact If the administrator views a malicious website while logged onto the web interface, the password and other configurati...

Cisco Security Advisory: SNMP Version 3 Authentication Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: SNMP Version 3 Authentication Vulnerabilities Document ID: 107408 Advisory ID: cisco-sa-20080610-snmpv3 http://www.cisco.com/warp/public/707/cisco-sa-20080610-snmpv3.shtml Revision 1.0 For Public Release 2008 June 10 1600 UTC...

Stack overflow

Rejected reason: Multiple stack-based buffer overflows in Cisco IOS 12.x and IOS XR allow attackers to execute arbitrary code, as demonstrated via the "Bind Shell", "Reverse Shell", and "Two byte rootshell Tiny Shell" attacks. NOTE: the vendor and researcher agree that this issue does not cross...

CVE-2007-4285

Unspecified vulnerability in Cisco IOS and Cisco IOS XR 12.x up to 12.3, including some versions before 12.315 and 12.314T, allows remote attackers to obtain sensitive information partial packet contents or cause a denial of service router or component crash via crafted IPv6 packets with a Type 0...

Design/Logic Flaw

Unspecified vulnerability in Cisco IOS and Cisco IOS XR 12.x up to 12.3, including some versions before 12.315 and 12.314T, allows remote attackers to obtain sensitive information partial packet contents or cause a denial of service router or component crash via crafted IPv6 packets with a Type 0...

CVE-2007-4285

CVE-2007-4285 affects Cisco IOS and Cisco IOS XR 12.x (up to 12.3; prior to 12.3(15) and 12.3(14)T are mentioned in sources). A crafted IPv6 packet with a Type 0 Routing Header can leak partial packet contents or crash the router/component, with information leakage and possible IPv6 subsystem cra...

CVE-2007-4285

Unspecified vulnerability in Cisco IOS and Cisco IOS XR 12.x up to 12.3, including some versions before 12.315 and 12.314T, allows remote attackers to obtain sensitive information partial packet contents or cause a denial of service router or component crash via crafted IPv6 packets with a Type 0...

[Full-disclosure] Cisco Security Advisory: Cisco IOS Information Leakage Using IPv6 Routing Header

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco IOS Information Leakage Using IPv6 Routing Header Advisory ID: cisco-sa-20070808-IOS-IPv6-leak http://www.cisco.com/warp/public/707/cisco-sa-20070808-IOS-IPv6-leak.shtml Revision 1.0 For Public Release 2007 August 08 160...

Information Leakage Using IPv6 Routing Header in Cisco IOS and Cisco IOS-XR

Cisco IOS and Cisco IOS XR contain a vulnerability when processing specially crafted IPv6 packets with a Type 0 Routing Header present. Exploitation of this vulnerability can lead to information leakage on affected IOS and IOS XR devices, and may also result in a crash of the affected IOS device...

Code injection

Cisco IOS 9.x, 10.x, 11.x, and 12.x and IOS XR 2.0.x, 3.0.x, and 3.2.x allows remote attackers to cause a denial of service or execute arbitrary code via a crafted IP option in the IP header in a 1 ICMP, 2 PIMv2, 3 PGM, or 4 URD packet...

CVE-2007-0480

Cisco IOS 9.x, 10.x, 11.x, and 12.x and IOS XR 2.0.x, 3.0.x, and 3.2.x allows remote attackers to cause a denial of service or execute arbitrary code via a crafted IP option in the IP header in a 1 ICMP, 2 PIMv2, 3 PGM, or 4 URD packet...

CVE-2006-1927

Cisco IOS XR, when configured for Multi Protocol Label Switching MPLS and running on Cisco CRS-1 or Cisco 12000 series routers, allows remote attackers to cause a denial of service Line card crash via certain MPLS packets, as identified by Cisco bug ID CSCsc77475...

CVE-2006-1928

Cisco IOS XR, when configured for Multi Protocol Label Switching MPLS and running on Cisco CRS-1 routers, allows remote attackers to cause a denial of service Modular Services Cards MSC crash or "MPLS packet handling problems" via certain MPLS packets, as identified by Cisco bug IDs 1 CSCsd15970...

Code injection

Cisco IOS XR, when configured for Multi Protocol Label Switching MPLS and running on Cisco CRS-1 or Cisco 12000 series routers, allows remote attackers to cause a denial of service Line card crash via certain MPLS packets, as identified by Cisco bug ID CSCsc77475...

Code injection

Cisco IOS XR, when configured for Multi Protocol Label Switching MPLS and running on Cisco CRS-1 routers, allows remote attackers to cause a denial of service Modular Services Cards MSC crash or "MPLS packet handling problems" via certain MPLS packets, as identified by Cisco bug IDs 1 CSCsd15970...

CVE-2006-1927

CVE-2006-1927 affects Cisco IOS XR on Cisco CRS-1 and Cisco 12000-series routers running MPLS. The issue allows remote attackers to cause a denial-of-service (line-card crash) by sending certain MPLS packets, as identified by Cisco bug CSCsc77475. The available connected documents confirm the aff...