Cisco IOS Software WebVPN and SSLVPN Vulnerabilities - Cisco Systems

Cisco IOS software contains two vulnerabilities within the Cisco IOS WebVPN or Cisco IOS SSLVPN feature SSLVPN that can be remotely exploited without authentication to cause a denial of service condition. Both vulnerabilities affect both Cisco IOS WebVPN and Cisco IOS SSLVPN features: - Crafted...

Cisco IOS WebVPN/SSLVPN远程拒绝服务漏洞

BUGTRAQ ID: 34239 CVECAN ID: CVE-2009-0628,CVE-2009-0627 Cisco IOS是思科网络设备所使用的互联网操作系统。 Cisco SSLVPN功能是增强版本的WebVPN功能，允许Internet中任意位置的用户远程访问企业站点。 如果接收到了特制的HPPTS报文，配置了SSLVPN功能的设备可能重载或挂起。必须完成SSLVPN功能相关TCP端口的三重握手才可以成功利用这个漏洞，但无需认证。SSLVPN默认的TCP端口号为443。...

CVE-2009-0628

CVE-2009-0628 affects Cisco IOS WebVPN/SSLVPN. The vulnerability is a memory leak in SSLVPN sessions after abnormally disconnected SSL sessions, potentially exhausting memory and crashing the device. Exploitation does not require authentication. Cisco’s advisory (cisco-sa-20090325-webvpn) documen...