CVE-2009-2870

Unspecified vulnerability in Cisco IOS 12.2 through 12.4, when the Cisco Unified Border Element feature is enabled, allows remote attackers to cause a denial of service device reload via crafted SIP messages, aka Bug ID CSCsx25880...

Cisco IOS SIP消息拒绝服务漏洞

BUGTRAQ ID: 36499 CVE ID: CVE-2009-2870 Cisco IOS是思科网络设备所使用的互联网操作系统。 如果设备运行的Cisco IOS镜像中包含有Cisco Unified Border Element功能，则Cisco IOS软件的SIP实现中存在拒绝服务漏洞。处理一系列特制的SIP消息会导致设备重载。 Cisco IOS 12.4 Cisco IOS 12.3 临时解决方法： 禁用SIP监听端口 sip-ua no transport udp no transport tcp no transport tcp tls 部署以下控制面整型（CoPP）...

Cisco Security Advisory: Cisco Unified Communications Manager Session Initiation Protocol Denial of Service Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco Unified Communications Manager Session Initiation Protocol Denial of Service Vulnerability Advisory ID: cisco-sa-20090923-cm Revision 1.0 For Public Release 2009 September 23...

Cisco Unified Communications Manager DoS

Crash on SIP request handling...

Cisco IOS Software Session Initiation Protocol Denial of Service Vulnerability

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

Cisco Security Advisory: Cisco IOS Software Zone-Based Policy Firewall Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco IOS Software Zone-Based Policy Firewall Vulnerability Advisory ID: cisco-sa-20090923-ios-fw Revision 1.0 For Public Release 2009 September 23 +--------------------------------------------------------------------- Summary...

Cisco Security Advisory: Cisco IOS Software Session Initiation Protocol Denial of Service Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco IOS Software Session Initiation Protocol Denial of Service Vulnerability Advisory ID: cisco-sa-20090923-sip Revision 1.0 For Public Release 2009 September 23...

Asterisk SIP Channel Driver DoS Vulnerability (AST-2009-005)

Asterisk is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:digium:asterisk";...

CVE-2009-2054

Cisco Unified Communications Manager aka CUCM, formerly CallManager 4.x, 5.x before 5.13g, 6.x before 6.14, 7.0 before 7.02asu1, and 7.1 before 7.12asu1 allows remote attackers to cause a denial of service file-descriptor exhaustion and SIP outage via a flood of TCP packets, aka Bug ID CSCsx23689...

Design/Logic Flaw

Cisco Unified Communications Manager aka CUCM, formerly CallManager 4.x, 5.x before 5.13g, 6.x before 6.14, 7.0 before 7.02asu1, and 7.1 before 7.12asu1 allows remote attackers to cause a denial of service file-descriptor exhaustion and SIP outage via a flood of TCP packets, aka Bug ID CSCsx23689...

Code injection

Cisco IOS 12.2 through 12.4 and 15.0 through 15.1, Cisco IOS XE 2.5.x and 2.6.x before 2.6.1, and Cisco Unified Communications Manager aka CUCM, formerly CallManager 4.x, 5.x before 5.13g, 6.x before 6.14, and 7.x before 7.12 allow remote attackers to cause a denial of service device reload or...

Code injection

Cisco Unified Communications Manager aka CUCM, formerly CallManager before 6.11 allows remote attackers to cause a denial of service voice-services outage via a malformed header in a SIP message, aka Bug ID CSCsi46466...

CVE-2009-2050

Cisco Unified Communications Manager aka CUCM, formerly CallManager before 6.11 allows remote attackers to cause a denial of service voice-services outage via a malformed header in a SIP message, aka Bug ID CSCsi46466...

CVE-2009-2051

Cisco IOS 12.2 through 12.4 and 15.0 through 15.1, Cisco IOS XE 2.5.x and 2.6.x before 2.6.1, and Cisco Unified Communications Manager aka CUCM, formerly CallManager 4.x, 5.x before 5.13g, 6.x before 6.14, and 7.x before 7.12 allow remote attackers to cause a denial of service device reload or...

CVE-2009-2050

CVE-2009-2050 concerns Cisco Unified Communications Manager (CUCM, formerly CallManager). The issue allows a remote attacker to cause a denial-of-service (voice-services outage) by sending a malformed header in a SIP message (Bug CSCsi46466). Affected products are CUCM before version 6.1(1), with...

CVE-2009-2051

Summary: CVE-2009-2051 affects Cisco IOS (12.2–12.4, 15.0–15.1), Cisco IOS XE 2.5.x–2.6.x before 2.6.1, and CUCM 4.x–7.x, enabling remote attackers to trigger a DoS (device reload/voice-services outage) via a malformed SIP INVITE that calls sipSafeStrlen and overflows into a crash. The issue is d...

CVE-2009-2054

CVE-2009-2054 affects Cisco Unified Communications Manager (CUCM) 4.x, 5.x (before 5.1(3g)), 6.x (before 6.1(4)), 7.0 (before 7.0(2a)su1) and 7.1 (before 7.1(2a)su1). It enables remote attackers to cause a denial of service via a flood of TCP packets, leading to file-descriptor exhaustion and SIP...

CVE-2009-2050

Cisco Unified Communications Manager aka CUCM, formerly CallManager before 6.11 allows remote attackers to cause a denial of service voice-services outage via a malformed header in a SIP message, aka Bug ID CSCsi46466...

CVE-2009-2054

Cisco Unified Communications Manager aka CUCM, formerly CallManager 4.x, 5.x before 5.13g, 6.x before 6.14, 7.0 before 7.02asu1, and 7.1 before 7.12asu1 allows remote attackers to cause a denial of service file-descriptor exhaustion and SIP outage via a flood of TCP packets, aka Bug ID CSCsx23689...

CVE-2009-2051

Cisco IOS 12.2 through 12.4 and 15.0 through 15.1, Cisco IOS XE 2.5.x and 2.6.x before 2.6.1, and Cisco Unified Communications Manager aka CUCM, formerly CallManager 4.x, 5.x before 5.13g, 6.x before 6.14, and 7.x before 7.12 allow remote attackers to cause a denial of service device reload or...