5046 matches found
CVE-2010-4692
CVE-2010-4692 affects Cisco ASA 5500-series devices running software before 8.3(2). The vulnerability allows a remote attacker to cause a denial-of-service (device crash) by initiating a large number of LAN-to-LAN IPsec sessions (L2L), per Bug ID CSCth36592. Affected component is the IPsec/L2L ha...
CVE-2010-4686
CallManager Express CME on Cisco IOS before 15.01XA1 does not properly handle SIP TRUNK traffic that contains rate bursts and a "peculiar" request size, which allows remote attackers to cause a denial of service memory consumption by sending this traffic over a long duration, aka Bug ID CSCtb4795...
CVE-2009-5040
CallManager Express CME on Cisco IOS before 15.01XA allows remote authenticated users to cause a denial of service device crash by using an extension mobility EM phone to interact with the menu for SNR number changes, aka Bug ID CSCta63555...
Code injection
Cisco IOS before 15.01XA1, when certain TFTP debugging is enabled, allows remote attackers to cause a denial of service device crash via a TFTP copy over IPv6, aka Bug ID CSCtb28877...
Code injection
Cisco IOS before 15.01XA does not properly handle IRC traffic during a specific time period after an initial reload, which allows remote attackers to cause a denial of service device reload via an attempted connection to a certain IRC server, related to a "corrupted magic value," aka Bug ID...
Design/Logic Flaw
CallManager Express CME on Cisco IOS before 15.01XA1 does not properly handle SIP TRUNK traffic that contains rate bursts and a "peculiar" request size, which allows remote attackers to cause a denial of service memory consumption by sending this traffic over a long duration, aka Bug ID CSCtb4795...
Design/Logic Flaw
STCAPP aka the SCCP telephony control application on Cisco IOS before 15.01XA1 does not properly handle multiple calls to a shared line, which allows remote attackers to cause a denial of service port hang by simultaneously ending two calls that were controlled by CallManager Express CME, aka Bug...
Memory corruption
Memory leak in Cisco IOS before 15.01XA5 might allow remote attackers to cause a denial of service memory consumption by sending a crafted SIP REGISTER message over UDP, aka Bug ID CSCtg41733...
Memory corruption
Memory leak in the gkcircuitinfodoinacf function in the H.323 implementation in Cisco IOS before 15.01XA allows remote attackers to cause a denial of service memory consumption via a large number of calls over a long duration, as demonstrated by InterZone Clear Token IZCT test traffic, aka Bug ID...
Design/Logic Flaw
CallManager Express CME on Cisco IOS before 15.01XA allows remote authenticated users to cause a denial of service device crash by using an extension mobility EM phone to interact with the menu for SNR number changes, aka Bug ID CSCta63555...
Design/Logic Flaw
Cisco IOS before 15.01XA1 does not clear the public key cache upon a change to a certificate map, which allows remote authenticated users to bypass a certificate ban by connecting with a banned certificate that had previously been valid, aka Bug ID CSCta79031...
CVE-2010-4685
Cisco IOS before 15.01XA1 does not clear the public key cache upon a change to a certificate map, which allows remote authenticated users to bypass a certificate ban by connecting with a banned certificate that had previously been valid, aka Bug ID CSCta79031...
CVE-2010-4683
Cisco IOS before 15.0(1)XA5 suffers a memory leak that can be triggered by a crafted SIP REGISTER message sent over UDP, potentially causing denial of service due to memory exhaustion (Bug ID CSCtg41733). This vulnerability affects Cisco's IOS environment as described in CVE-2010-4683. The public...
CVE-2010-4687
STCAPP aka the SCCP telephony control application on Cisco IOS before 15.01XA1 does not properly handle multiple calls to a shared line, which allows remote attackers to cause a denial of service port hang by simultaneously ending two calls that were controlled by CallManager Express CME, aka Bug...
CVE-2009-5038
Cisco IOS before 15.01XA does not properly handle IRC traffic during a specific time period after an initial reload, which allows remote attackers to cause a denial of service device reload via an attempted connection to a certain IRC server, related to a "corrupted magic value," aka Bug ID...
CVE-2009-5040
CallManager Express CME on Cisco IOS before 15.01XA allows remote authenticated users to cause a denial of service device crash by using an extension mobility EM phone to interact with the menu for SNR number changes, aka Bug ID CSCta63555...
CVE-2010-4684
Cisco IOS before 15.01XA1, when certain TFTP debugging is enabled, allows remote attackers to cause a denial of service device crash via a TFTP copy over IPv6, aka Bug ID CSCtb28877...
CVE-2009-5040
CVE-2009-5040 affects Cisco CallManager Express (CME) on Cisco IOS prior to 15.0(1)XA. The issue allows remote authenticated users to trigger a denial-of-service (device crash) by interacting with the SNR-number change menu using an Extension Mobility (EM) phone. Root cause is not detailed beyond...
CVE-2009-5039
Memory leak in the gkcircuitinfodoinacf function in the H.323 implementation in Cisco IOS before 15.01XA allows remote attackers to cause a denial of service memory consumption via a large number of calls over a long duration, as demonstrated by InterZone Clear Token IZCT test traffic, aka Bug ID...