Ericsson Drutt MSDP (Instance Monitor) Directory Traversal / File Access

+------------------------------------------------------------------------------------------------------+ + Ericsson Drutt MSDP Instance Monitor - Directory Traversal Vulnerability and Arbitrary File Access +...

Ericsson Drutt MSDP (3PI Manager) Cross Site Scripting

+p-------------------------------------------------------------------+ + Ericsson Drutt MSDP 3PI Manager - Cross Site Scripting Injection + +--------------------------------------------------------------------+ Affected Product: Ericsson Drutt MSDP 3PI Manager Vendor Homepage : www.ericsson.com...

Ericsson Drutt MSDP (Report Viewer) Cross Site Scripting

+----------------------------------------------------------------------+ + Ericsson Drutt MSDP Report Viewer - Cross Site Scripting Injection + +----------------------------------------------------------------------+ Affected Product: Ericsson Drutt MSDP Report Viewer Vendor Homepage :...

Ericsson Drutt MSDP (3PI Manager) Open Redirect

+------------------------------------------------------+ + Ericsson Drutt MSDP 3PI Manager - Open Redirection + +------------------------------------------------------+ Affected Product: Ericsson Drutt MSDP 3PI Manager Vendor Homepage : www.ericsson.com Version : 4, 5 and 6 CVE v2 Vector :...

Cisco IOS Software Multicast Network Time Protocol Denial of Service Vulnerability (cisco-sa-20130925-ntp)

A vulnerability in the implementation of the Network Time Protocol NTP feature in Cisco IOS Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service DoS condition. The vulnerability is due to the improper handling of multicas...

Cisco IOS XE Software Multicast Network Time Protocol Denial of Service Vulnerability (cisco-sa-20130925-ntp)

A vulnerability in the implementation of the Network Time Protocol NTP feature in Cisco IOS XE Software allows an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service DoS condition. The vulnerability is due to improper handling of multicast NTP...

CVE-2013-5472

The NTP implementation in Cisco IOS 12.0 through 12.4 and 15.0 through 15.1, and IOS XE 2.1 through 3.3, does not properly handle encapsulation of multicast NTP packets within MSDP SA messages, which allows remote attackers to cause a denial of service device reload by leveraging an MSDP peer...

Code injection

The NTP implementation in Cisco IOS 12.0 through 12.4 and 15.0 through 15.1, and IOS XE 2.1 through 3.3, does not properly handle encapsulation of multicast NTP packets within MSDP SA messages, which allows remote attackers to cause a denial of service device reload by leveraging an MSDP peer...

Cisco IOS Software Multicast Network Time Protocol Denial of Service Vulnerability

A vulnerability in the implementation of the Network Time Protocol NTP feature in Cisco IOS Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service DoS condition. The vulnerability is due to the improper handling of multicas...

CVE-2012-0382

The Multicast Source Discovery Protocol MSDP implementation in Cisco IOS 12.0, 12.2 through 12.4, and 15.0 through 15.2 and IOS XE 2.1.x through 2.6.x and 3.1.xS through 3.4.xS before 3.4.1S and 3.1.xSG and 3.2.xSG before 3.2.2SG allows remote attackers to cause a denial of service device reload...

Design/Logic Flaw

The Multicast Source Discovery Protocol MSDP implementation in Cisco IOS 12.0, 12.2 through 12.4, and 15.0 through 15.2 and IOS XE 2.1.x through 2.6.x and 3.1.xS through 3.4.xS before 3.4.1S and 3.1.xSG and 3.2.xSG before 3.2.2SG allows remote attackers to cause a denial of service device reload...

CVE-2012-0382

CVE-2012-0382 affects Cisco IOS and IOS XE: MSDP implementation vulnerable to DoS via MSDP packets carrying encapsulated IGMP data, causing a device reload. Affects Cisco IOS 12.0; 12.2–12.4; 15.0–15.2; IOS XE 2.1.x–2.6.x and 3.1.xS–3.4.xS before 3.4.1S, and 3.1.xSG–3.2.xSG before 3.2.2SG. The at...

Cisco IOS 15.x组播源发现协议远程拒绝服务漏洞

BUGTRAQ ID: 52759 CVE ID: CVE-2012-0382 MSDP是用于连接多个PIM-SM域的协议，允许一个组的组播源让不同域内的所有RP知悉。 从外部MSDP配置的对等路由器接收到包含压缩的IGMP数据的MSDP报文时，可造成受影响设备重载。如果该路由器明确的加入了组播组，才可利用此漏洞。MSDP报文目标地址是单一传播，可发往受影响设备上的任何IP地址，包括回送地址。通行报文不会触发此漏洞。 0 Cisco IOS 15.x 厂商补丁： Cisco ----- Cisco已经为此发布了一个安全公告（cisco-sa-20120328-msdp）以及相应补丁:...