CVE-2010-1562

The SIP implementation on the Cisco PGW 2200 Softswitch with software 9.73S before 9.73S9 and 9.73P before 9.73P9 allows remote attackers to cause a denial of service device crash via a malformed Contact header, aka Bug ID CSCsj98521...

Code injection

The SIP implementation on the Cisco PGW 2200 Softswitch with software 9.73S before 9.73S9 and 9.73P before 9.73P9 allows remote attackers to cause a denial of service device crash via a malformed header, aka Bug ID CSCsk04588...

Code injection

The SIP implementation on the Cisco PGW 2200 Softswitch with software 9.73S before 9.73S9 and 9.73P before 9.73P9 allows remote attackers to cause a denial of service device crash via a malformed Contact header, aka Bug ID CSCsj98521...

Code injection

The SIP implementation on the Cisco PGW 2200 Softswitch with software before 9.73S10 allows remote attackers to cause a denial of service device crash via a malformed session attribute, aka Bug ID CSCsk40030...

Code injection

Unspecified vulnerability in the SIP implementation on the Cisco PGW 2200 Softswitch with software before 9.73S10 allows remote attackers to cause a denial of service device crash via unknown SIP traffic, as demonstrated by "SIP testing," aka Bug ID CSCsk38165...

Code injection

Unspecified vulnerability in the SIP implementation on the Cisco PGW 2200 Softswitch with software 9.73S before 9.73S9 and 9.73P before 9.73P9 allows remote attackers to cause a denial of service TCP socket exhaustion via unknown vectors, aka Bug ID CSCsk13561...

Code injection

The SIP implementation on the Cisco PGW 2200 Softswitch with software 9.73S before 9.73S11 and 9.73P before 9.73P11 allows remote attackers to cause a denial of service device crash via a long message, aka Bug ID CSCsk44115...

Code injection

The SIP implementation on the Cisco PGW 2200 Softswitch with software before 9.73S11 allows remote attackers to cause a denial of service device crash via a malformed packet, aka Bug ID CSCsk32606...

CVE-2010-1561

The SIP implementation on the Cisco PGW 2200 Softswitch with software 9.73S before 9.73S11 and 9.73P before 9.73P11 allows remote attackers to cause a denial of service device crash via a long message, aka Bug ID CSCsk44115...

CVE-2010-1567

The Cisco PGW 2200 Softswitch SIP MGCP stack is affected by CVE-2010-1567 (and related CVEs) as described in Cisco advisory cisco-sa-20100512-pgw. The vulnerability arises from malformed SIP header handling in the SIP implementation, enabling remote attackers to cause a device crash (DoS). The is...

CVE-2010-1562

CVE-2010-1562 affects Cisco PGW 2200 Softswitch SIP MGCP processing. The vulnerability, described in Cisco advisory cisco-sa-20100512-pgw and linked CVE CSCsj98521, allows remote attackers to cause a device crash (DoS) by sending malformed SIP/Contact headers. Affected software versions include C...

CVE-2010-0602

The SIP implementation on the Cisco PGW 2200 Softswitch with software before 9.73S11 allows remote attackers to cause a denial of service device crash via a malformed packet, aka Bug ID CSCsk32606...

CVE-2010-0602

Cisco PGW 2200 Softswitch SIP/MGCP stack contains DoS vulnerabilities (CVE-2010-0602 among others) that allow remote attackers to crash the device via malformed SIP/MGCP packets. Affected software: Cisco PGW 2200 Softswitch prior to 9.7(3)S11; Cisco reports that all listed vulnerabilities are fix...

CVE-2010-1563

The CVE-2010-1563 issue affects Cisco PGW 2200 Softswitch SIP processing. A malformed SIP header can be used by a remote attacker to crash the device (DoS). Affected software includes 9.7(3)S9 and 9.7(3)P9 before 9.7(3)S11/P11; later fixes are 9.7(3)S11 and 9.8(1)S5 with subsequent releases addre...

CVE-2010-0603

The SIP implementation on the Cisco PGW 2200 Softswitch with software before 9.73S10 allows remote attackers to cause a denial of service device crash via a malformed session attribute, aka Bug ID CSCsk40030...

CVE-2010-1563

The SIP implementation on the Cisco PGW 2200 Softswitch with software 9.73S before 9.73S9 and 9.73P before 9.73P9 allows remote attackers to cause a denial of service device crash via a malformed header, aka Bug ID CSCsk04588...

Cross site scripting

Cross-site scripting XSS vulnerability in Cisco Router and Security Device Manager SDM allows remote attackers to inject arbitrary web script or HTML via unknown vectors, aka Bug ID CSCtb38467...

CVE-2010-0594

Cisco Router and Security Device Manager (SDM) suffers a cross-site scripting (XSS) vulnerability (Bug ID CSCtb38467) that allows remote attackers to inject arbitrary script or HTML via unknown vectors. Affected products: Cisco Router and Security Device Manager (SDM) web-based management tool; v...

Design/Logic Flaw

The Web Install ActiveX control CSDWebInstaller in Cisco Secure Desktop CSD before 3.5.841 does not properly verify the signatures of downloaded programs, which allows remote attackers to force the download and execution of arbitrary files via a crafted web page, aka Bug ID CSCta25876...

CVE-2010-0589

The Web Install ActiveX control CSDWebInstaller in Cisco Secure Desktop CSD before 3.5.841 does not properly verify the signatures of downloaded programs, which allows remote attackers to force the download and execution of arbitrary files via a crafted web page, aka Bug ID CSCta25876...