CVE-2010-1561

CVE-2010-1561 affects Cisco PGW 2200 Softswitch SIP stack. The vulnerability allows remote attackers to crash the device by sending a long SIP message, triggering a DoS on affected firmware releases. Affected versions include Cisco PGW 2200 Softswitch with software 9.7(3)S before 9.7(3)S11 and 9....

CVE-2010-1567

The Cisco PGW 2200 Softswitch SIP MGCP stack is affected by CVE-2010-1567 (and related CVEs) as described in Cisco advisory cisco-sa-20100512-pgw. The vulnerability arises from malformed SIP header handling in the SIP implementation, enabling remote attackers to cause a device crash (DoS). The is...

CVE-2010-0601

The CVE-2010-0601 entry relates to the Cisco PGW 2200 Softswitch. The connected documents specify DoS via malformed MGCP/SIP packets that can crash the device or cause DoS by preventing new TCP connections. Affected product: Cisco PGW 2200 Softswitch; vulnerable components: MGCP and SIP handling ...

CVE-2010-1561

The SIP implementation on the Cisco PGW 2200 Softswitch with software 9.73S before 9.73S11 and 9.73P before 9.73P11 allows remote attackers to cause a denial of service device crash via a long message, aka Bug ID CSCsk44115...

CVE-2010-1562

The SIP implementation on the Cisco PGW 2200 Softswitch with software 9.73S before 9.73S9 and 9.73P before 9.73P9 allows remote attackers to cause a denial of service device crash via a malformed Contact header, aka Bug ID CSCsj98521...

CVE-2010-1565

Cisco PGW 2200 Softswitch SIP/MGCP stack is affected by multiple remote DoS vulnerabilities (CVE-2010-1565 among others). Exploitation can exhaust TCP sockets and prevent new connections; affected releases include Cisco PGW 2200 Softswitch 9.7(3)S before 9.7(3)S9 and 9.7(3)P before 9.7(3)P9. Cisc...

CVE-2010-0602

Cisco PGW 2200 Softswitch SIP/MGCP stack contains DoS vulnerabilities (CVE-2010-0602 among others) that allow remote attackers to crash the device via malformed SIP/MGCP packets. Affected software: Cisco PGW 2200 Softswitch prior to 9.7(3)S11; Cisco reports that all listed vulnerabilities are fix...

CVE-2010-1563

The CVE-2010-1563 issue affects Cisco PGW 2200 Softswitch SIP processing. A malformed SIP header can be used by a remote attacker to crash the device (DoS). Affected software includes 9.7(3)S9 and 9.7(3)P9 before 9.7(3)S11/P11; later fixes are 9.7(3)S11 and 9.8(1)S5 with subsequent releases addre...

CVE-2010-1567

The SIP implementation on the Cisco PGW 2200 Softswitch with software before 9.81S5 allows remote attackers to cause a denial of service device crash via a malformed header, aka Bug ID CSCsz13590...

CVE-2010-0603

The SIP implementation on the Cisco PGW 2200 Softswitch with software before 9.73S10 allows remote attackers to cause a denial of service device crash via a malformed session attribute, aka Bug ID CSCsk40030...

CVE-2010-0601

The MGCP implementation on the Cisco PGW 2200 Softswitch with software before 9.73S11 allows remote attackers to cause a denial of service device crash via a malformed packet, aka Bug ID CSCsl39126...

CVE-2010-0604

Cisco PGW 2200 Softswitch is affected by multiple DoS vulnerabilities in its SIP and MGCP handling (CVE-2010-0604 among others). The SIP implementation can crash the device via malformed/unknown SIP traffic, potentially affecting remote availability. Cisco lists affected releases prior to 9.7(3)S...

CVE-2010-1565

Unspecified vulnerability in the SIP implementation on the Cisco PGW 2200 Softswitch with software 9.73S before 9.73S9 and 9.73P before 9.73P9 allows remote attackers to cause a denial of service TCP socket exhaustion via unknown vectors, aka Bug ID CSCsk13561...

CVE-2010-1563

The SIP implementation on the Cisco PGW 2200 Softswitch with software 9.73S before 9.73S9 and 9.73P before 9.73P9 allows remote attackers to cause a denial of service device crash via a malformed header, aka Bug ID CSCsk04588...

Cisco PGW Softswitch multiple security vulnerabilities

Multiple DoS conditions...

Cisco Security Advisory: Multiple vulnerabilities in Cisco PGW Softswitch

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Multiple vulnerabilities in Cisco PGW Softswitch Document ID: 111870 Advisory ID: cisco-sa-20100512-pgw http://www.cisco.com/warp/public/707/cisco-sa-20100512-pgw.shtml Revision 1.0 For Public Release 2010 May 12 1600 UTC GMT -...

Cisco Releases Updates for PGW Softswitch

Cisco has released updates to address multiple vulnerabilities in Cisco PGW Softswitch. These vulnerabilities may allow an attacker to cause a denial-of-service condition. US-CERT encourages users and administrators to review Cisco security advisory cisco-sa-20100512-pgw and apply any necessary...

Multiple Vulnerabilities in Cisco PGW Softswitch

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...