Vulnerabilities > Cisco > IOS > 12.1yd

DATE CVE VULNERABILITY TITLE RISK
2010-03-25 CVE-2010-0583 Resource Management Errors vulnerability in Cisco IOS 12.1Xu/12.1Yd/12.2B
Memory leak in the H.323 implementation in Cisco IOS 12.1 through 12.4, and 15.0M before 15.0(1)M1, allows remote attackers to cause a denial of service (memory consumption and device reload) via malformed H.323 packets, aka Bug ID CSCtb93855.
network
low complexity
cisco CWE-399
7.8
2010-03-25 CVE-2010-0582 Unspecified vulnerability in Cisco IOS
Cisco IOS 12.1 through 12.4, and 15.0M before 15.0(1)M1, allows remote attackers to cause a denial of service (interface queue wedge) via malformed H.323 packets, aka Bug ID CSCta19962.
network
low complexity
cisco
7.8
2010-03-25 CVE-2010-0576 Denial of Service vulnerability in Cisco IOS Multiprotocol Label Switching (MPLS) Malformed Packet
Unspecified vulnerability in Cisco IOS 12.0 through 12.4, IOS XE 2.1.x through 2.3.x before 2.3.2, and IOS XR 3.2.x through 3.4.3, when Multiprotocol Label Switching (MPLS) and Label Distribution Protocol (LDP) are enabled, allows remote attackers to cause a denial of service (device reload or process restart) via a crafted LDP packet, aka Bug IDs CSCsz45567 and CSCsj25893.
network
low complexity
cisco
7.8
2009-09-28 CVE-2009-2873 Unspecified vulnerability in Cisco IOS
Cisco IOS 12.0 through 12.4, when IP-based tunnels and the Cisco Express Forwarding feature are enabled, allows remote attackers to cause a denial of service (device reload) via malformed packets, aka Bug ID CSCsx70889.
network
cisco
7.1
2009-09-28 CVE-2009-2872 Unspecified vulnerability in Cisco IOS
Cisco IOS 12.0 through 12.4, when IP-based tunnels and the Cisco Express Forwarding feature are enabled, allows remote attackers to cause a denial of service (device reload) via a malformed packet that is not properly handled during switching from one tunnel to a second tunnel, aka Bug IDs CSCsh97579 and CSCsq31776.
network
low complexity
cisco
6.8
2009-09-28 CVE-2009-2863 Improper Authentication vulnerability in Cisco IOS
Race condition in the Firewall Authentication Proxy feature in Cisco IOS 12.0 through 12.4 allows remote attackers to bypass authentication, or bypass the consent web page, via a crafted request, aka Bug ID CSCsy15227.
network
cisco CWE-287
7.1
2009-03-27 CVE-2009-0636 Denial of Service vulnerability in Cisco IOS Session Initiation Protocol
Unspecified vulnerability in Cisco IOS 12.0 through 12.4, when SIP voice services are enabled, allows remote attackers to cause a denial of service (device crash) via a valid SIP message.
network
low complexity
cisco
7.8
2009-03-27 CVE-2009-0630 Features IP Sockets Denial Of Service vulnerability in Cisco IOS
The (1) Cisco Unified Communications Manager Express; (2) SIP Gateway Signaling Support Over Transport Layer Security (TLS) Transport; (3) Secure Signaling and Media Encryption; (4) Blocks Extensible Exchange Protocol (BEEP); (5) Network Admission Control HTTP Authentication Proxy; (6) Per-user URL Redirect for EAPoUDP, Dot1x, and MAC Authentication Bypass; (7) Distributed Director with HTTP Redirects; and (8) TCP DNS features in Cisco IOS 12.0 through 12.4 do not properly handle IP sockets, which allows remote attackers to cause a denial of service (outage or resource consumption) via a series of crafted TCP packets.
network
cisco
7.1
2009-03-27 CVE-2009-0631 Features UDP Packet Denial of Service vulnerability in Cisco IOS
Unspecified vulnerability in Cisco IOS 12.0 through 12.4, when configured with (1) IP Service Level Agreements (SLAs) Responder, (2) Session Initiation Protocol (SIP), (3) H.323 Annex E Call Signaling Transport, or (4) Media Gateway Control Protocol (MGCP) allows remote attackers to cause a denial of service (blocked input queue on the inbound interface) via a crafted UDP packet.
network
low complexity
cisco
7.8
2009-01-16 CVE-2008-3821 Cross-Site Scripting vulnerability in Cisco IOS
Multiple cross-site scripting (XSS) vulnerabilities in the HTTP server in Cisco IOS 11.0 through 12.4 allow remote attackers to inject arbitrary web script or HTML via (1) the query string to the ping program or (2) unspecified other aspects of the URI.
network
cisco CWE-79
4.3