Session fixation

The session-manager service in Cisco StarOS 12.0, 12.2300, 14.0, and 14.0600 on ASR 5000 devices allows remote attackers to cause a denial of service service reload and packet loss via malformed HTTP packets, aka Bug ID CSCud14217...

CVE-2015-0712

Cisco StarOS for ASR 5000 Series (12.0, 12.2(300), 14.0, 14.0(600)) uses a vulnerable session-manager service that can be remotely triggered to reload, causing DoS via malformed HTTP packets (Bug CSCud14217). Affected devices process HTTP at the session-manager, and the issue’s exploitation leads...

CVE-2015-0712

The session-manager service in Cisco StarOS 12.0, 12.2300, 14.0, and 14.0600 on ASR 5000 devices allows remote attackers to cause a denial of service service reload and packet loss via malformed HTTP packets, aka Bug ID CSCud14217...

PT-2015-4833

Name of the Vulnerable Software and Affected Versions Cisco StarOS versions 12.0, 12.2300, 14.0, 14.0600 Description The issue allows remote attackers to cause a denial of service, resulting in service reload and packet loss, via malformed HTTP packets. Recommendations For Cisco StarOS version...

CVE-2015-0712: Undefined Security Weakness

The session-manager service in Cisco StarOS 12.0, 12.2300, 14.0, and 14.0600 on ASR 5000 devices allows remote attackers to cause a denial of service service reload and packet loss via malformed HTTP packets, aka Bug ID CSCud14217...

Cisco StarOS for Cisco ASR 5000 Series HTTP Packet Processing Denial of Service Vulnerability

A vulnerability in HTTP packet processing of Cisco StarOS for Cisco ASR 5000 Series devices could allow an unauthenticated, remote attacker to cause a reload of the session manager service on the affected device. The vulnerability is due to improper processing of malformed HTTP packets. An...

CVE-2015-0711

The hamgr service in the IPv6 Proxy Mobile PM implementation in Cisco StarOS 18.1.0.59776 on ASR 5000 devices allows remote attackers to cause a denial of service service reload and call-processing outage via malformed PM packets, aka Bug ID CSCut94711...

Code injection

The hamgr service in the IPv6 Proxy Mobile PM implementation in Cisco StarOS 18.1.0.59776 on ASR 5000 devices allows remote attackers to cause a denial of service service reload and call-processing outage via malformed PM packets, aka Bug ID CSCut94711...

CVE-2015-0711

The hamgr service in the IPv6 Proxy Mobile PM implementation in Cisco StarOS 18.1.0.59776 on ASR 5000 devices allows remote attackers to cause a denial of service service reload and call-processing outage via malformed PM packets, aka Bug ID CSCut94711...

CVE-2015-0711

The CVE-2015-0711 issue affects Cisco StarOS (ASR 5000) with hamgr in the IPv6 Proxy Mobile (PM) implementation (Cisco StarOS 18.1.0.59776). The root cause is improper processing of malformed IPv6 PM packets in the hamgr service, enabling a remote attacker to cause a denial of service via a servi...

Cisco ASR 5000 Series StarOS Denial of Service Vulnerability

The Cisco ASR 5000 Series is the 5000 series of wireless controller products from Cisco.StarOS is a virtualized operating system that runs on the 5000 series of wireless controller products to dynamically allocate resources for mobile services and networks. A security vulnerability exists in the...

CVE-2015-0711: Undefined Security Weakness

The hamgr service in the IPv6 Proxy Mobile PM implementation in Cisco StarOS 18.1.0.59776 on ASR 5000 devices allows remote attackers to cause a denial of service service reload and call-processing outage via malformed PM packets, aka Bug ID CSCut94711...

PT-2015-4832

Name of the Vulnerable Software and Affected Versions Cisco StarOS version 18.1.0.59776 Description The issue affects the hamgr service in the IPv6 Proxy Mobile implementation, allowing remote attackers to cause a denial of service. This can result in a service reload and call-processing outage v...

Cisco StarOS for Cisco ASR 5000 Series HAMGR Service Proxy Mobile IPv6 Processing Denial of Service Vulnerability

A vulnerability in proxy mobile PM IPv6 processing of Cisco StarOS for Cisco ASR 5000 Series devices could allow an unauthenticated, remote attacker to cause a reload of the hamgr service on the affected device. The vulnerability is due to improper processing of malformed IPv6 PM packets. An...

Cisco IOS / ASA / FWSM / NX-OS / StarOS OSPF protocol vulnerability

LSA packet routing table manipulation...

CVE-2013-0149

The OSPF implementation in Cisco IOS 12.0 through 12.4 and 15.0 through 15.3, IOS-XE 2.x through 3.9.xS, ASA and PIX 7.x through 9.1, FWSM, NX-OS, and StarOS before 14.0.50488 does not properly validate Link State Advertisement LSA type 1 packets before performing operations on the LSA database,...

PT-2013-1007

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.0 through 12.4 Cisco IOS versions 15.0 through 15.3 Cisco IOS-XE versions 2.x through 3.9.xS Cisco ASA and PIX versions 7.x through 9.1 Cisco FWSM Cisco NX-OS Cisco StarOS versions prior to 14.0.50488 Description The OSPF...

Radius Manager Cross Site Scripting

Check Point Software Technologies - Vulnerability Discovery Team VDT http://www.checkpoint.com/defense/ Radius Manager Multiple Cross Site Scripting Issues CVE-2010-4275 INTRODUCTION Radius Manager is a centralized way for administration of Mikrotik, Cisco, Chillispot and StarOS routers and...

Radius Manager 3.8.0 - Multiple Cross-Site Scripting Vulnerabilities

Radius Manager 3.8.0 - Multiple Cross-Site Scripting Vulnerabilities Check Point Software Technologies - Vulnerability Discovery Team VDT http://www.checkpoint.com/defense/ Radius Manager Multiple Cross Site Scripting Issues CVE-2010-4275 INTRODUCTION Radius Manager is a centralized way for...

Radius Manager 3.8.0 - Multiple Cross-Site Scripting Vulnerabilities

Check Point Software Technologies - Vulnerability Discovery Team VDT http://www.checkpoint.com/defense/ Radius Manager Multiple Cross Site Scripting Issues CVE-2010-4275 INTRODUCTION Radius Manager is a centralized way for administration of Mikrotik, Cisco, Chillispot and StarOS routers and...