Cisco IOS Software Data-Link Switching Vulnerability

Cisco IOS Software contains a memory leak vulnerability in the Data-Link Switching DLSw feature that could result in a device reload when processing crafted IP Protocol 91 packets. Cisco has released software updates that address this vulnerability. This advisory is posted at...

CVE-2011-1625

Cisco IOS 12.2, 12.3, 12.4, 15.0, and 15.1, when the data-link switching DLSw feature is configured, allows remote attackers to cause a denial of service device crash by sending a sequence of malformed packets and leveraging a "narrow timing window," aka Bug ID CSCtf74999, a different vulnerabili...

Design/Logic Flaw

Cisco IOS 12.2, 12.3, 12.4, 15.0, and 15.1, when the data-link switching DLSw feature is configured, allows remote attackers to cause a denial of service device crash by sending a sequence of malformed packets and leveraging a "narrow timing window," aka Bug ID CSCtf74999, a different vulnerabili...

CVE-2011-1625

The CVE-2011-1625 entry describes Cisco IOS (versions 12.2, 12.3, 12.4, 15.0, 15.1) with DLSw enabled as vulnerable. Affected component: DLSw on Cisco IOS; root cause: processing of malformed packets within a narrow timing window leads to a device crash (DoS). Impact: remote attackers can cause a...

CVE-2011-1625

Cisco IOS 12.2, 12.3, 12.4, 15.0, and 15.1, when the data-link switching DLSw feature is configured, allows remote attackers to cause a denial of service device crash by sending a sequence of malformed packets and leveraging a "narrow timing window," aka Bug ID CSCtf74999, a different vulnerabili...

DLSw Vulnerability - Cisco Systems

A vulnerability exists in the Data-link Switching DLSw feature in Cisco IOS where an invalid value in a DLSw message could result in a reload of the DLSw device. Successful exploitation of this vulnerability requires that an attacker be able to establish a DLSw connection to the device. There are...

Multiple DLSw Denial of Service Vulnerabilities in Cisco IOS - Cisco Systems

Cisco IOS contains multiple vulnerabilities in the Data-link Switching DLSw feature that may result in a reload or memory leaks when processing specially crafted UDP or IP Protocol 91 packets. Cisco has released free software updates that address these vulnerabilities. Workarounds are available t...

Design/Logic Flaw

The 1 Airline Product Set aka ALPS, 2 Serial Tunnel Code aka STUN, 3 Block Serial Tunnel Code aka BSTUN, 4 Native Client Interface Architecture NCIA support, 5 Data-link switching aka DLSw, 6 Remote Source-Route Bridging RSRB, 7 Point to Point Tunneling Protocol PPTP, 8 X.25 for Record Boundary...

CVE-2009-0629

Cisco IOS DLSw feature (12.2, 12.3, 12.4, 15.0, 15.1) is affected by a DoS via a sequence of malformed packets exploiting a narrow timing window (Bug ID CSCtf74999). The related Red Hat/NVD entries describe that this vulnerability can cause device crashes or reloads. Mitigation details are not pr...

CISCO routers IOS multiple security vulnerabilities

MVPN information leak, UDP DoS, multiple VPDN and DLSw DoS, multiple OSPF and MPLS vulnerabilities...

Code injection

The data-link switching DLSw component in Cisco IOS 12.0 through 12.4 allows remote attackers to cause a denial of service device restart or memory consumption via crafted 1 UDP port 2067 or 2 IP protocol 91 packets...

CVE-2008-1152

The data-link switching DLSw component in Cisco IOS 12.0 through 12.4 allows remote attackers to cause a denial of service device restart or memory consumption via crafted 1 UDP port 2067 or 2 IP protocol 91 packets...

CVE-2008-1152

CVE-2008-1152 affects Cisco IOS 12.0–12.4 with the Data-Link Switching (DLSw) feature enabled. The vulnerability allows remote attackers to cause a denial of service (device restart or memory consumption) by sending crafted UDP packets to port 2067 or packets using IP protocol 91. This is the exp...

Multiple DLSw Denial of Service Vulnerabilities in Cisco IOS

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

Cisco Security Advisory: Multiple DLSw Denial of Service Vulnerabilities in Cisco IOS

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Multiple DLSw Denial of Service Vulnerabilities in Cisco IOS Advisory ID: cisco-sa-20080326-dlsw http://www.cisco.com/warp/public/707/cisco-sa-20080326-dlsw.shtml Revision 1.0 For Public Release 2008 March 26 1600 UTC GMT...

Cisco IOS Data-link Switching (DLSw) Capabilities Exchange Remote DoS (CSCsf28840)

The remote host is a CISCO router containing a version of IOS that is affected by a denial of service vulnerability. An attacker may exploit this flaw to crash the remote device. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid24019; scriptversion"1.19";...

Cisco IOS数据链路交换拒绝服务漏洞

Cisco IOS的数据链路交换（DLSw）功能允许通过IP网络传输IBM系统网络架构（SNA）和网络基础输入/输出系统（NetBIOS）通讯。 Cisco IOS DLSw功能在协调交互过程中处理某些无效选项时存在漏洞，远程攻击者可能利用此漏洞执行拒绝服务攻击，导致设备重载。 创建DLSw通讯包括以下几个操作阶段。 1. 在第一阶段，DLSw对等端通过TCP 2065或2067端口相互创建两个TCP连接，这些TCP连接是DLSw通讯的基础。 2. 创建连接之后DLSw伙伴在第二阶段交换所支持功能的列表，这有助于对等端使用相同的选项，如果DLSw伙伴由不同厂商生产的话这一点尤其重要。 3...

CVE-2007-0199

The Data-link Switching DLSw feature in Cisco IOS 11.0 through 12.4 allows remote attackers to cause a denial of service device reload via "an invalid value in a DLSw message... during the capabilities exchange."...

Design/Logic Flaw

The Data-link Switching DLSw feature in Cisco IOS 11.0 through 12.4 allows remote attackers to cause a denial of service device reload via "an invalid value in a DLSw message... during the capabilities exchange."...

CVE-2007-0199

The Data-link Switching DLSw feature in Cisco IOS 11.0 through 12.4 allows remote attackers to cause a denial of service device reload via "an invalid value in a DLSw message... during the capabilities exchange."...