Cisco IOS Software WebVPN and SSLVPN Vulnerabilities - Cisco Systems

Cisco IOS software contains two vulnerabilities within the Cisco IOS WebVPN or Cisco IOS SSLVPN feature SSLVPN that can be remotely exploited without authentication to cause a denial of service condition. Both vulnerabilities affect both Cisco IOS WebVPN and Cisco IOS SSLVPN features: - Crafted...

CVE-2009-0626

The CVE-2009-0626 entry covers Cisco IOS WebVPN/SSLVPN vulnerabilities in 12.3–12.4. A crafted HTTPS packet can cause a device reload/hang (Crash). The adjacent CVE-2009-0628 describes a memory‑leak condition in SSLVPN sessions that can exhaust memory and crash the device. Affected releases inclu...