CVE-2011-2578

Memory leak in Cisco IOS 15.1 and 15.2 allows remote attackers to cause a denial of service memory consumption via malformed SIP packets on a NAT interface, aka Bug ID CSCts12366...

Memory corruption

Memory leak in Cisco IOS 15.1 and 15.2 allows remote attackers to cause a denial of service memory consumption via malformed SIP packets on a NAT interface, aka Bug ID CSCts12366...

CVE-2011-2578

Memory leak in Cisco IOS 15.1 and 15.2 allows remote attackers to cause a denial of service memory consumption via malformed SIP packets on a NAT interface, aka Bug ID CSCts12366...

CVE-2011-2578

CVE-2011-2578 describes a memory leak in Cisco IOS 15.1 and 15.2 that can be triggered by malformed SIP packets on a NAT interface, allowing remote attackers to cause a denial of service (memory consumption). This vulnerability is associated with Bug ID CSCts12366. The available references confir...

Cisco IOS Software Network Address Translation Vulnerability (cisco-sa-20120328-nat)

The Cisco IOS Software Network Address Translation NAT feature contains a denial of service DoS vulnerability in the translation of Session Initiation Protocol SIP packets. The vulnerability is caused when packets in transit on the vulnerable device require translation on the SIP payload. Cisco h...

Cisco Security Advisory: Cisco IOS Software Network Address Translation Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Cisco Security Advisory: Cisco IOS Software Network Address Translation Vulnerability Advisory ID: cisco-sa-20120328-nat Revision 1.0 For Public Release 2012 March 28 16:00 UTC GMT +-------------------------------------------------------------------...

CVE-2012-0383

Memory leak in the NAT feature in Cisco IOS 12.4, 15.0, and 15.1 allows remote attackers to cause a denial of service memory consumption, and device hang or reload via SIP packets that require translation, related to a "memory starvation vulnerability," aka Bug ID CSCti35326...

Memory corruption

Memory leak in the NAT feature in Cisco IOS 12.4, 15.0, and 15.1 allows remote attackers to cause a denial of service memory consumption, and device hang or reload via SIP packets that require translation, related to a "memory starvation vulnerability," aka Bug ID CSCti35326...

CVE-2012-0383

Memory leak in the NAT feature in Cisco IOS 12.4, 15.0, and 15.1 allows remote attackers to cause a denial of service memory consumption, and device hang or reload via SIP packets that require translation, related to a "memory starvation vulnerability," aka Bug ID CSCti35326...

CVE-2012-0383

CVE-2012-0383 describes a memory leak in the Cisco IOS NAT SIP translation feature that can exhaust memory and cause DoS (device hang or reload). Affected are Cisco IOS Software trains supporting NAT for SIP, with memory starvation linked to SIP payload translation. The vulnerability is identifie...

NAT-PMP External Address Scanner

Scan NAT devices for their external address using NAT-PMP This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'NAT-PMP External Address Scanner', 'Description' = 'Scan NAT devices for their external...

Researcher Releases New Version of P0f Fingerprinting Tool

Security researcher Michal Zalewski has released a new version of a passive fingerprinting tool called P0f that has the ability to diagnose a wide range of components in an Internet connection, even uncovering clients that are trying to forge some part of their identity in the connection. P0f is ...

nat-pmp-mapport NSE Script

Maps a WAN port on the router to a local port on the client using the NAT Port Mapping Protocol NAT-PMP. It supports the following operations: map - maps a new external port on the router to an internal port of the requesting IP unmap - unmaps a previously mapped port for the requesting IP unmapa...

Exploit for Asterisk Security Advisory AST-2011-013

A Metasploit module is attached that demonstrates how to enumerate Asterisk sip peers that have a nat setting different to the global sip nat setting as described in Asterisk Security Advisory AST-2011-013. The example below finds all peers with nat=yes, but the metasploit module will also work...

TFTP File Transfer Utility

This module will transfer a file to or from a remote TFTP server. Note that the target must be able to connect back to the Metasploit system, and NAT traversal for TFTP is often unsupported. Two actions are supported: "Upload" and "Download," which behave as one might expect -- use 'set action...

Asterisk Multiple Vulnerabilities (AST-2011-013 / AST-2011-014)

According to the version in its SIP banner, the version of Asterisk running on the remote host is potentially affected by the following vulnerabilities : - An issue in the SIP protocol can lead to the enumeration of endpoints with NAT settings different from the default. Note that this is an issu...

AST-2011-013: Possible remote enumeration of SIP endpoints with differing NAT settings

Asterisk Project Security Advisory - AST-2011-013 Product Asterisk Summary Possible remote enumeration of SIP endpoints with differing NAT settings Nature of Advisory Unauthorized data disclosure Susceptibility Remote unauthenticated sessions Severity Minor Exploits Known Yes Reported On 2011-07-...

FreeBSD : asterisk -- Multiple Vulnerabilities (bb389137-21fb-11e1-89b4-001ec9578670)

Asterisk project reports : It is possible to enumerate SIP usernames when the general and user/peer NAT settings differ in whether to respond to the port a request is sent from or the port listed for responses in the Via header. When the 'automon' feature is enabled in features.conf, it is possib...

CVE-2011-3278

Unspecified vulnerability in the NAT implementation in Cisco IOS 12.1 through 12.4 and 15.0 through 15.1, and IOS XE 3.1.xSG, allows remote attackers to cause a denial of service device reload by sending crafted SIP packets to UDP port 5060, aka Bug ID CSCti48483...

CVE-2011-3276

Unspecified vulnerability in the NAT implementation in Cisco IOS 12.1 through 12.4 and 15.0 through 15.1, and IOS XE 3.1.xSG, allows remote attackers to cause a denial of service device reload or hang by sending crafted SIP packets to TCP port 5060, aka Bug ID CSCso02147...