Design/Logic Flaw

The DNS-over-TCP implementation in Cisco IOS 12.2 and 15.0 through 15.3, when NAT is used, allows remote attackers to cause a denial of service device reload via a crafted IPv4 DNS TCP stream, aka Bug ID CSCtn53730...

CVE-2013-5480

The DNS-over-TCP implementation in Cisco IOS 12.2 and 15.0 through 15.3, when NAT is used, allows remote attackers to cause a denial of service device reload via a crafted IPv4 DNS TCP stream, aka Bug ID CSCuf28733...

CVE-2013-5481

Cisco IOS Software NAT implementation contains a vulnerability in PPTP handling that, when NAT is used, can be exploited by remote attackers sending crafted TCP port-1723 packets to cause a DoS and device reload. Affected releases include Cisco IOS 12.2 and 15.0–15.3. The issue is identified as B...

CVE-2013-5479

The DNS-over-TCP implementation in Cisco IOS 12.2 and 15.0 through 15.3, when NAT is used, allows remote attackers to cause a denial of service device reload via a crafted IPv4 DNS TCP stream, aka Bug ID CSCtn53730...

Astium Remote Code Execution Vulnerability

This Metasploit module exploits vulnerabilities found in Astium astium-confweb-2.1-25399 RPM and lower. A SQL Injection vulnerability is used to achieve authentication bypass and gain admin access. From an admin session arbitrary PHP code upload is possible. It is used to add the final PHP payloa...

CVE-2013-5481: Improper Input Validation

The PPTP implementation in Cisco IOS 12.2 and 15.0 through 15.3, when NAT is used, allows remote attackers to cause a denial of service device reload via crafted TCP port-1723 packets, aka Bug ID CSCtq14817...

CVE-2013-5480: Improper Input Validation

The DNS-over-TCP implementation in Cisco IOS 12.2 and 15.0 through 15.3, when NAT is used, allows remote attackers to cause a denial of service device reload via a crafted IPv4 DNS TCP stream, aka Bug ID CSCuf28733...

CVE-2013-5474: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition in the IPv6 virtual fragmentation reassembly VFR implementation in Cisco IOS 12.2 through 12.4 and 15.0 through 15.3 allows remote attackers to cause a denial of service device reload or hang via fragmented IPv6 packets, aka Bug ID CSCud64812...

CVE-2013-5472: Improper Input Validation

The NTP implementation in Cisco IOS 12.0 through 12.4 and 15.0 through 15.1, and IOS XE 2.1 through 3.3, does not properly handle encapsulation of multicast NTP packets within MSDP SA messages, which allows remote attackers to cause a denial of service device reload by leveraging an MSDP peer...

Astium Remote Code Execution

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "Astium Remote Cod...

Cisco IOS Software Internet Key Exchange Memory Leak Vulnerability

A vulnerability in the Internet Key Exchange IKE protocol of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a memory leak that could lead to a device reload. The vulnerability is due to incorrect handling of malformed IKE packets by the...

Cisco Releases Semiannual IOS Software Security Advisory Bundled Publication

Cisco has released its semiannual Cisco IOS Software Security Advisory Bundled Publication. This publication includes eight Security Advisories that address vulnerabilities in Cisco IOS Software. Exploits of these vulnerabilities could result in a denial of service DoS condition, interface queue...

PT-2013-5563

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.2, 15.1, and 15.2 Cisco IOS XE versions 3.4.2S through 3.4.5S Cisco IOS XE versions 3.6.xS before 3.6.1S Description A memory leak in the Internet Key Exchange IKE protocol could allow an unauthenticated, remote attacker ...

PT-2013-5567

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.2, 15.0 through 15.3 Description The DNS-over-TCP implementation in Cisco IOS, when NAT is used, allows remote attackers to cause a denial of service device reload via a crafted IPv4 DNS TCP stream. The Cisco IOS Software...

CVE-2013-1121: Undefined Security Weakness

The regex engine in the BGP implementation in Cisco NX-OS, when a complex regular expression is configured for inbound routes, allows remote attackers to cause a denial of service device reload via a crafted AS path set, aka Bug ID CSCuf49554...

Medium: gnupg

Issue Overview: GnuPG before 1.4.14, and Libgcrypt before 1.5.3 as used in GnuPG 2.0.x and possibly other products, allows local users to obtain private RSA keys via a cache side-channel attack involving the L3 cache, aka Flush+Reload. Affected Packages: gnupg Issue Correction: Run yum update gnu...

Astium Remote Code Execution

This module exploits vulnerabilities found in Astium astium-confweb-2.1-25399 RPM and lower. A SQL Injection vulnerability is used to achieve authentication bypass and gain admin access. From an admin session arbitrary PHP code upload is possible. It is used to add the final PHP payload to...

CVE-2013-5496

CVE-2013-5496 affects Cisco NX-OS Open Network Environment Platform (ONEP). A vulnerability due to insufficient pointer validation allows an authenticated, remote attacker to cause a network element to reload (DoS) by sending crafted packets. The issue, tracked as CSCui51551, is documented in Cis...

CVE-2013-5496: Improper Input Validation

Open Network Environment Platform ONEP in Cisco NX-OS allows remote authenticated users to cause a denial of service network-element reload via a crafted packet, aka Bug ID CSCui51551...

Cisco Open Network Environment Platform Unvalidated Pointer Vulnerability

A vulnerability in the Open Network Environment Platform ONEP could allow an authenticated, remote attacker to cause the network element to reload. The vulnerability is due to insufficient pointer validation. An attacker could exploit this vulnerability by sending a crafted packet to an ONEP...