PT-2013-5634

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 15.1 through 15.14M6 Description A vulnerability exists in the Session Initiation Protocol SIP implementation that could allow an unauthenticated, remote attacker to cause a reload of an affected device or cause memory leaks...

CVE-2013-5547

Cisco IOS XE 3.9 before 3.9.2S on 1000 ASR devices allows remote attackers to cause a denial of service device reload by sending malformed EoGRE packets over 1 IPv4 or 2 IPv6, aka Bug ID CSCuf08269...

Code injection

Cisco IOS XE 3.9 before 3.9.2S on 1000 ASR devices allows remote attackers to cause a denial of service device reload by sending malformed EoGRE packets over 1 IPv4 or 2 IPv6, aka Bug ID CSCuf08269...

CVE-2013-5547

Cisco IOS XE 3.9 before 3.9.2S on 1000 ASR devices is affected by CVE-2013-5547, where malformed EoGRE packets over IPv4/IPv6 can cause a remote denial of service (device reload). This is documented in Cisco advisory Cisco-SA-20131030-ASR1000 and mirrored in NVD/Red Hat records. The root cause is...

CVE-2013-5547: Improper Input Validation

Cisco IOS XE 3.9 before 3.9.2S on 1000 ASR devices allows remote attackers to cause a denial of service device reload by sending malformed EoGRE packets over 1 IPv4 or 2 IPv6, aka Bug ID CSCuf08269...

PT-2013-5628

Name of the Vulnerable Software and Affected Versions Cisco IOS XE versions 3.9 through 3.9.2S Description The issue allows remote attackers to cause a denial of service by sending malformed EoGRE packets over IPv4 or IPv6. Successful exploitation could trigger a reload of the embedded services...

CVE-2013-5549

Cisco IOS XR 3.8.1 through 4.2.0 does not properly process fragmented packets within the RP-A, RP-B, PRP, and DRP-B route-processor components, which allows remote attackers to cause a denial of service transmission outage via 1 IPv4 or 2 IPv6 traffic, aka Bug ID CSCuh30380...

PT-2013-5630

Name of the Vulnerable Software and Affected Versions Cisco IOS XR versions 3.8.1 through 4.2.0 Cisco IOS XR Software Releases 3.3.0 to 4.2.0 Description The issue is related to the improper processing of fragmented packets within certain route-processor components, which can cause a denial of...

DDoS Attacks, Attacks from Asia/Pacific Up in Q2

Three-quarters of the world’s attack traffic emanates from source IP addresses in Indonesia and China, according to Akamai’s latest quarterly State of the Internet report. The report is a deep dive into traffic trends crossing the Cambridge, Ma.-based company’s network during the second quarter...

Multi Gather Resolve Hosts

Resolves hostnames to either IPv4 or IPv6 addresses from the perspective of the remote host. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Multi Gather Resolve Hosts', 'Description' = %q...

CVE-2013-5476

The Zone-Based Firewall ZFW feature in Cisco IOS 15.1 through 15.2, when content filtering or HTTP ALG inspection is enabled, allows remote attackers to cause a denial of service device reload or hang via crafted IPv4 HTTP traffic, aka Bug ID CSCtx56174...

Cross site scripting

The Zone-Based Firewall ZFW feature in Cisco IOS 15.1 through 15.2, when content filtering or HTTP ALG inspection is enabled, allows remote attackers to cause a denial of service device reload or hang via crafted IPv4 HTTP traffic, aka Bug ID CSCtx56174...

Design/Logic Flaw

The DNS-over-TCP implementation in Cisco IOS 12.2 and 15.0 through 15.3, when NAT is used, allows remote attackers to cause a denial of service device reload via a crafted IPv4 DNS TCP stream, aka Bug ID CSCtn53730...

Code injection

The DNS-over-TCP implementation in Cisco IOS 12.2 and 15.0 through 15.3, when NAT is used, allows remote attackers to cause a denial of service device reload via a crafted IPv4 DNS TCP stream, aka Bug ID CSCuf28733...

CVE-2013-5476

The Zone-Based Firewall ZFW feature in Cisco IOS 15.1 through 15.2, when content filtering or HTTP ALG inspection is enabled, allows remote attackers to cause a denial of service device reload or hang via crafted IPv4 HTTP traffic, aka Bug ID CSCtx56174...

CVE-2013-5479

The DNS-over-TCP implementation in Cisco IOS 12.2 and 15.0 through 15.3, when NAT is used, allows remote attackers to cause a denial of service device reload via a crafted IPv4 DNS TCP stream, aka Bug ID CSCtn53730...

CVE-2013-5476: Improper Input Validation

The Zone-Based Firewall ZFW feature in Cisco IOS 15.1 through 15.2, when content filtering or HTTP ALG inspection is enabled, allows remote attackers to cause a denial of service device reload or hang via crafted IPv4 HTTP traffic, aka Bug ID CSCtx56174...

PT-2013-5564

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 15.1 through 15.2 Description The issue is related to the Zone-Based Firewall ZFW feature in Cisco IOS, specifically when content filtering or HTTP ALG inspection is enabled. It allows remote attackers to cause a denial of...

PT-2013-5567

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.2, 15.0 through 15.3 Description The DNS-over-TCP implementation in Cisco IOS, when NAT is used, allows remote attackers to cause a denial of service device reload via a crafted IPv4 DNS TCP stream. The Cisco IOS Software...

PT-2013-5566

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.2, 15.0 through 15.3 Description The DNS-over-TCP implementation in Cisco IOS, when NAT is used, allows remote attackers to cause a denial of service device reload via a crafted IPv4 DNS TCP stream. The Cisco IOS Software...