Cisco IOS multiple security vulnerabilities

DoS via SIP, DoS via ICGMP, SSL information leak, DoS in voice protocols application layer gateway for NAT...

CVE-2010-2835

Cisco IOS 12.2 through 12.4 and 15.0 through 15.1, Cisco IOS XE 2.5.x and 2.6.x before 2.6.1, and Cisco Unified Communications Manager aka CUCM, formerly CallManager 6.x before 6.15, 7.0 before 7.02asu3, 7.1su before 7.13bsu2, 7.1 before 7.15, and 8.0 before 8.01 allow remote attackers to cause a...

CVE-2010-2834

Cisco IOS 12.2 through 12.4 and 15.0 through 15.1, Cisco IOS XE 2.5.x and 2.6.x before 2.6.1, and Cisco Unified Communications Manager aka CUCM, formerly CallManager 6.x before 6.15SU1, 7.x before 7.15, and 8.0 before 8.02 allow remote attackers to cause a denial of service device reload or...

CVE-2010-2831

Unspecified vulnerability in the NAT for SIP implementation in Cisco IOS 12.1 through 12.4 and 15.0 through 15.1 allows remote attackers to cause a denial of service device reload via transit traffic on UDP port 5060, aka Bug ID CSCtf17624...

Code injection

Cisco IOS 12.2 through 12.4 and 15.0 through 15.1, Cisco IOS XE 2.5.x and 2.6.x before 2.6.1, and Cisco Unified Communications Manager aka CUCM, formerly CallManager 6.x before 6.15SU1, 7.x before 7.15, and 8.0 before 8.02 allow remote attackers to cause a denial of service device reload or...

Code injection

Unspecified vulnerability in the NAT for SIP implementation in Cisco IOS 12.1 through 12.4 and 15.0 through 15.1 allows remote attackers to cause a denial of service device reload via transit traffic on UDP port 5060, aka Bug ID CSCtf17624...

Cross site request forgery (csrf)

Cisco IOS 12.2 through 12.4 and 15.0 through 15.1, Cisco IOS XE 2.5.x and 2.6.x before 2.6.1, and Cisco Unified Communications Manager aka CUCM, formerly CallManager 6.x before 6.15, 7.0 before 7.02asu3, 7.1su before 7.13bsu2, 7.1 before 7.15, and 8.0 before 8.01 allow remote attackers to cause a...

CVE-2010-2831

Unspecified vulnerability in the NAT for SIP implementation in Cisco IOS 12.1 through 12.4 and 15.0 through 15.1 allows remote attackers to cause a denial of service device reload via transit traffic on UDP port 5060, aka Bug ID CSCtf17624...

CVE-2010-2834

Cisco IOS 12.2 through 12.4 and 15.0 through 15.1, Cisco IOS XE 2.5.x and 2.6.x before 2.6.1, and Cisco Unified Communications Manager aka CUCM, formerly CallManager 6.x before 6.15SU1, 7.x before 7.15, and 8.0 before 8.02 allow remote attackers to cause a denial of service device reload or...

CVE-2010-2831

CVE-2010-2831 concerns Cisco IOS NAT for SIP DoS vulnerability. The NAT for SIP feature on Cisco IOS 12.1–12.4 and 15.0–15.1 can cause a device reload (DoS) when processing transit UDP SIP traffic on port 5060 (Bug CSCtf17624). Documents in the Cisco advisory indicate separate NAT DoS issues for ...

CVE-2010-2835

CVE-2010-2835 affects Cisco IOS Software (12.2–12.4, 15.0–15.1), Cisco IOS-XE 2.5.x/2.6.x before 2.6.1, and CUCM 6.x/7.x/8.x. The flaw resides in SIP processing where a crafted SIP REFER with an invalid Refer-To header can trigger a DoS, causing device reloads or voice-services outages. Fixed ver...

CVE-2010-2834

CVE-2010-2834 affects Cisco IOS/IOS XE and CUCM. A crafted SIP registration over UDP can crash the device, causing a reload or voice-services outage. Affected: IOS 12.2–12.4, 15.0–15.1; IOS XE 2.5.x–2.6.x before 2.6.1; CUCM 6.x before 6.1(5)SU1, 7.x before 7.1(5), 8.0 before 8.0(2). Root cause: p...

CVE-2010-2835

Cisco IOS 12.2 through 12.4 and 15.0 through 15.1, Cisco IOS XE 2.5.x and 2.6.x before 2.6.1, and Cisco Unified Communications Manager aka CUCM, formerly CallManager 6.x before 6.15, 7.0 before 7.02asu3, 7.1su before 7.13bsu2, 7.1 before 7.15, and 8.0 before 8.01 allow remote attackers to cause a...

Cisco Releases Security Advisories

Cisco has released six security advisories to address vulnerabilities affecting the Cisco IOS Software and the Cisco Unified Communications Manager. Exploitation of these vulnerabilities may allow an attacker to cause a denial-of-service condition. US-CERT encourages users and administrators to...

Cisco Unified Communications Manager Session Initiation Protocol Denial of Service Vulnerabilities

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

Cisco IOS Software Session Initiation Protocol Denial of Service Vulnerabilities

Multiple vulnerabilities exist in the Session Initiation Protocol SIP implementation in Cisco IOS® Software that could allow an unauthenticated, remote attacker to cause a reload of an affected device when SIP operation is enabled. Cisco has released software updates that address these...

Cisco IOS Software Network Address Translation Vulnerabilities

The Cisco IOS® Software Network Address Translation functionality contains three denial of service DoS vulnerabilities. The first vulnerability is in the translation of Session Initiation Protocol SIP packets, the second vulnerability in the translation of H.323 packets and the third vulnerabilit...

Cisco IOS Software Session Initiation Protocol Denial of Service Vulnerabilities (cisco-sa-20100922-sip)

Multiple vulnerabilities exist in the Session Initiation Protocol SIP implementation in Cisco IOS Software that could allow an unauthenticated, remote attacker to cause a reload of an affected device when SIP operation is enabled. Cisco has released free software updates that address these...

Voice Vulnerabilities in Cisco IOS and Cisco Unified Communications Manager - Cisco Systems

Multiple voice-related vulnerabilities are identified in Cisco IOS software, one of which is also shared with Cisco Unified Communications Manager. These vulnerabilities pertain to the following protocols or features: - Session Initiation Protocol SIP - Media Gateway Control Protocol MGCP -...

SIP Packets Reload IOS Devices with support for SIP

Cisco devices running an affected version of Internetwork Operating System IOS which supports Session Initiation Protocol SIP are affected by a vulnerability that may lead to a reload of the device when receiving a specific series of packets destined to port 5060. This issue is compounded by a...