Vulnerabilities > Cisco > IOS > 12.4xd

DATE CVE VULNERABILITY TITLE RISK
2009-09-28 CVE-2009-2870 Unspecified vulnerability in Cisco IOS
Unspecified vulnerability in Cisco IOS 12.2 through 12.4, when the Cisco Unified Border Element feature is enabled, allows remote attackers to cause a denial of service (device reload) via crafted SIP messages, aka Bug ID CSCsx25880.
network
low complexity
cisco
7.8
2009-09-28 CVE-2009-2868 Unspecified vulnerability in Cisco IOS
Unspecified vulnerability in Cisco IOS 12.2 through 12.4, when certificate-based authentication is enabled for IKE, allows remote attackers to cause a denial of service (Phase 1 SA exhaustion) via crafted requests, aka Bug IDs CSCsy07555 and CSCee72997.
network
low complexity
cisco
7.8
2009-09-28 CVE-2009-2866 Denial of Service vulnerability in Cisco IOS H.323
Unspecified vulnerability in Cisco IOS 12.2 through 12.4 allows remote attackers to cause a denial of service (device reload) via a crafted H.323 packet, aka Bug ID CSCsz38104.
network
low complexity
cisco
7.8
2009-09-28 CVE-2009-2863 Improper Authentication vulnerability in Cisco IOS
Race condition in the Firewall Authentication Proxy feature in Cisco IOS 12.0 through 12.4 allows remote attackers to bypass authentication, or bypass the consent web page, via a crafted request, aka Bug ID CSCsy15227.
network
cisco CWE-287
7.1
2009-03-27 CVE-2009-0637 Permissions, Privileges, and Access Controls vulnerability in Cisco IOS
The SCP server in Cisco IOS 12.2 through 12.4, when Role-Based CLI Access is enabled, does not enforce the CLI view configuration for file transfers, which allows remote authenticated users with an attached CLI view to (1) read or (2) overwrite arbitrary files via an SCP command.
network
high complexity
cisco CWE-264
7.1
2009-03-27 CVE-2009-0636 Denial of Service vulnerability in Cisco IOS Session Initiation Protocol
Unspecified vulnerability in Cisco IOS 12.0 through 12.4, when SIP voice services are enabled, allows remote attackers to cause a denial of service (device crash) via a valid SIP message.
network
low complexity
cisco
7.8
2009-03-27 CVE-2009-0630 Features IP Sockets Denial Of Service vulnerability in Cisco IOS
The (1) Cisco Unified Communications Manager Express; (2) SIP Gateway Signaling Support Over Transport Layer Security (TLS) Transport; (3) Secure Signaling and Media Encryption; (4) Blocks Extensible Exchange Protocol (BEEP); (5) Network Admission Control HTTP Authentication Proxy; (6) Per-user URL Redirect for EAPoUDP, Dot1x, and MAC Authentication Bypass; (7) Distributed Director with HTTP Redirects; and (8) TCP DNS features in Cisco IOS 12.0 through 12.4 do not properly handle IP sockets, which allows remote attackers to cause a denial of service (outage or resource consumption) via a series of crafted TCP packets.
network
cisco
7.1
2009-03-27 CVE-2009-0629 Unspecified vulnerability in Cisco IOS
The (1) Airline Product Set (aka ALPS), (2) Serial Tunnel Code (aka STUN), (3) Block Serial Tunnel Code (aka BSTUN), (4) Native Client Interface Architecture (NCIA) support, (5) Data-link switching (aka DLSw), (6) Remote Source-Route Bridging (RSRB), (7) Point to Point Tunneling Protocol (PPTP), (8) X.25 for Record Boundary Preservation (RBP), (9) X.25 over TCP (XOT), and (10) X.25 Routing features in Cisco IOS 12.2 and 12.4 allows remote attackers to cause a denial of service (device reload) via a series of crafted TCP packets.
network
high complexity
cisco
5.4
2009-03-27 CVE-2009-0626 Resource Management Errors vulnerability in Cisco IOS
The SSLVPN feature in Cisco IOS 12.3 through 12.4 allows remote attackers to cause a denial of service (device reload or hang) via a crafted HTTPS packet.
network
low complexity
cisco CWE-399
7.8
2009-03-27 CVE-2009-0631 Features UDP Packet Denial of Service vulnerability in Cisco IOS
Unspecified vulnerability in Cisco IOS 12.0 through 12.4, when configured with (1) IP Service Level Agreements (SLAs) Responder, (2) Session Initiation Protocol (SIP), (3) H.323 Annex E Call Signaling Transport, or (4) Media Gateway Control Protocol (MGCP) allows remote attackers to cause a denial of service (blocked input queue on the inbound interface) via a crafted UDP packet.
network
low complexity
cisco
7.8