EUVD-2013-1259

Malware in sbrugna...

Cisco IPS SensorApp Regex Processing Denial of Service Vulnerability

Cisco Intrusion Prevention System IPS SensorApp contains a vulnerability that could allow a local attacker to cause a denial of service DoS condition. The vulnerability is due to a job failure in the Regex hardware when processing the control transaction getENGVirtualSensorStatistics. A local...

CVE-2013-1219

SensorApp in Cisco Intrusion Prevention System IPS allows local users to cause a denial of service Regex hardware job failure and application hang via a 1 initiate signature upgrade, 2 initiate global correlation, 3 show statistics anomaly-detection, or 4 clear database action, aka Bug ID...

Code injection

SensorApp in Cisco Intrusion Prevention System IPS allows local users to cause a denial of service Regex hardware job failure and application hang via a 1 initiate signature upgrade, 2 initiate global correlation, 3 show statistics anomaly-detection, or 4 clear database action, aka Bug ID...

CVE-2013-1219

SensorApp in Cisco Intrusion Prevention System IPS allows local users to cause a denial of service Regex hardware job failure and application hang via a 1 initiate signature upgrade, 2 initiate global correlation, 3 show statistics anomaly-detection, or 4 clear database action, aka Bug ID...

CVE-2013-1219

Cisco IPS SensorApp contains a local denial-of-service vulnerability (CVE-2013-1219) caused by a Regex hardware job failure when processing the control transaction getENGVirtualSensorStatistics. A local attacker with authenticated access could trigger DoS by actions such as initiating a signature...

CVE-2013-1219: Undefined Security Weakness

SensorApp in Cisco Intrusion Prevention System IPS allows local users to cause a denial of service Regex hardware job failure and application hang via a 1 initiate signature upgrade, 2 initiate global correlation, 3 show statistics anomaly-detection, or 4 clear database action, aka Bug ID...

Code injection

The updateTime function in sensorApp on Cisco IPS 4200 series sensors 7.0 and 7.1 allows remote attackers to cause a denial of service process crash and traffic-inspection outage via network traffic, aka Bug ID CSCta96144...

Memory corruption

sensorApp on Cisco IPS 4200 series sensors 6.0, 6.2, and 7.0 does not properly allocate memory, which allows remote attackers to cause a denial of service memory corruption and process crash, and traffic-inspection outage via network traffic, aka Bug ID CSCtn23051...

PT-2012-5068

Name of the Vulnerable Software and Affected Versions Cisco IPS 4200 series sensors versions 7.0 through 7.1 Description The issue allows remote attackers to cause a denial of service, resulting in a process crash and traffic-inspection outage, via network traffic. This is related to the updateTi...

PT-2012-5067

Name of the Vulnerable Software and Affected Versions sensorApp on Cisco IPS 4200 series sensors versions 6.0, 6.2, and 7.0 Description The issue is related to improper memory allocation, which can be exploited by remote attackers to cause a denial of service. This can result in memory corruption...

CVE-2012-3899: Undefined Security Weakness

sensorApp on Cisco IPS 4200 series sensors 6.0, 6.2, and 7.0 does not properly allocate memory, which allows remote attackers to cause a denial of service memory corruption and process crash, and traffic-inspection outage via network traffic, aka Bug ID CSCtn23051...

CVE-2012-3901: Improper Restriction of Operations within the Bounds of a Memory Buffer

The updateTime function in sensorApp on Cisco IPS 4200 series sensors 7.0 and 7.1 allows remote attackers to cause a denial of service process crash and traffic-inspection outage via network traffic, aka Bug ID CSCta96144...