Conceptronic Authentication Bypass

Conceptronic Grab’n’Go Network Storage and Sitecom Home Storage Center - Authentication Bypass Vulnerability in - AA-001 Severity Rating: High Discovery Date: May 5, 2012 Vendor Notification: May 31, 2012 =Impact - System Access - Exposure of sensitive information =Severity Rating Alcyon rates th...

CVE-2011-2578

Memory leak in Cisco IOS 15.1 and 15.2 allows remote attackers to cause a denial of service memory consumption via malformed SIP packets on a NAT interface, aka Bug ID CSCts12366...

Memory corruption

Memory leak in Cisco IOS 15.1 and 15.2 allows remote attackers to cause a denial of service memory consumption via malformed SIP packets on a NAT interface, aka Bug ID CSCts12366...

CVE-2011-2578

Memory leak in Cisco IOS 15.1 and 15.2 allows remote attackers to cause a denial of service memory consumption via malformed SIP packets on a NAT interface, aka Bug ID CSCts12366...

CVE-2011-2578

CVE-2011-2578 describes a memory leak in Cisco IOS 15.1 and 15.2 that can be triggered by malformed SIP packets on a NAT interface, allowing remote attackers to cause a denial of service (memory consumption). This vulnerability is associated with Bug ID CSCts12366. The available references confir...

CVE-2011-2578: Undefined Security Weakness

Memory leak in Cisco IOS 15.1 and 15.2 allows remote attackers to cause a denial of service memory consumption via malformed SIP packets on a NAT interface, aka Bug ID CSCts12366...

PT-2012-1563

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 15.1 through 15.2 Description A memory leak issue allows remote attackers to cause a denial of service by consuming memory via malformed SIP packets on a NAT interface. Recommendations For Cisco IOS versions 15.1 through 15....

Cisco Security Advisory: Cisco IOS Software Network Address Translation Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Cisco Security Advisory: Cisco IOS Software Network Address Translation Vulnerability Advisory ID: cisco-sa-20120328-nat Revision 1.0 For Public Release 2012 March 28 16:00 UTC GMT +-------------------------------------------------------------------...

Cisco IOS Software Network Address Translation Vulnerability (cisco-sa-20120328-nat)

The Cisco IOS Software Network Address Translation NAT feature contains a denial of service DoS vulnerability in the translation of Session Initiation Protocol SIP packets. The vulnerability is caused when packets in transit on the vulnerable device require translation on the SIP payload. Cisco h...

CVE-2012-0383

Memory leak in the NAT feature in Cisco IOS 12.4, 15.0, and 15.1 allows remote attackers to cause a denial of service memory consumption, and device hang or reload via SIP packets that require translation, related to a "memory starvation vulnerability," aka Bug ID CSCti35326...

Memory corruption

Memory leak in the NAT feature in Cisco IOS 12.4, 15.0, and 15.1 allows remote attackers to cause a denial of service memory consumption, and device hang or reload via SIP packets that require translation, related to a "memory starvation vulnerability," aka Bug ID CSCti35326...

CVE-2012-0383

CVE-2012-0383 describes a memory leak in the Cisco IOS NAT SIP translation feature that can exhaust memory and cause DoS (device hang or reload). Affected are Cisco IOS Software trains supporting NAT for SIP, with memory starvation linked to SIP payload translation. The vulnerability is identifie...

CVE-2012-0383

Memory leak in the NAT feature in Cisco IOS 12.4, 15.0, and 15.1 allows remote attackers to cause a denial of service memory consumption, and device hang or reload via SIP packets that require translation, related to a "memory starvation vulnerability," aka Bug ID CSCti35326...

CVE-2012-0383: Undefined Security Weakness

Memory leak in the NAT feature in Cisco IOS 12.4, 15.0, and 15.1 allows remote attackers to cause a denial of service memory consumption, and device hang or reload via SIP packets that require translation, related to a "memory starvation vulnerability," aka Bug ID CSCti35326...

PT-2012-1007

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.4 through 15.1 Description The issue is related to a memory leak in the Network Address Translation NAT feature, allowing remote attackers to cause a denial of service memory consumption, and device hang or reload via SIP...

NAT-PMP External Address Scanner

Scan NAT devices for their external address using NAT-PMP This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'NAT-PMP External Address Scanner', 'Description' = 'Scan NAT devices for their external...

Researcher Releases New Version of P0f Fingerprinting Tool

Security researcher Michal Zalewski has released a new version of a passive fingerprinting tool called P0f that has the ability to diagnose a wide range of components in an Internet connection, even uncovering clients that are trying to forge some part of their identity in the connection. P0f is ...

nat-pmp-mapport NSE Script

Maps a WAN port on the router to a local port on the client using the NAT Port Mapping Protocol NAT-PMP. It supports the following operations: map - maps a new external port on the router to an internal port of the requesting IP unmap - unmaps a previously mapped port for the requesting IP unmapa...

Exploit for Asterisk Security Advisory AST-2011-013

A Metasploit module is attached that demonstrates how to enumerate Asterisk sip peers that have a nat setting different to the global sip nat setting as described in Asterisk Security Advisory AST-2011-013. The example below finds all peers with nat=yes, but the metasploit module will also work...

TFTP File Transfer Utility

This module will transfer a file to or from a remote TFTP server. Note that the target must be able to connect back to the Metasploit system, and NAT traversal for TFTP is often unsupported. Two actions are supported: "Upload" and "Download," which behave as one might expect -- use 'set action...