Vulnerabilities > Cisco > IOS > 12.4xn

DATE CVE VULNERABILITY TITLE RISK
2009-03-27 CVE-2009-0629 Unspecified vulnerability in Cisco IOS
The (1) Airline Product Set (aka ALPS), (2) Serial Tunnel Code (aka STUN), (3) Block Serial Tunnel Code (aka BSTUN), (4) Native Client Interface Architecture (NCIA) support, (5) Data-link switching (aka DLSw), (6) Remote Source-Route Bridging (RSRB), (7) Point to Point Tunneling Protocol (PPTP), (8) X.25 for Record Boundary Preservation (RBP), (9) X.25 over TCP (XOT), and (10) X.25 Routing features in Cisco IOS 12.2 and 12.4 allows remote attackers to cause a denial of service (device reload) via a series of crafted TCP packets.
network
high complexity
cisco
5.4
2009-03-27 CVE-2009-0626 Resource Management Errors vulnerability in Cisco IOS
The SSLVPN feature in Cisco IOS 12.3 through 12.4 allows remote attackers to cause a denial of service (device reload or hang) via a crafted HTTPS packet.
network
low complexity
cisco CWE-399
7.8
2009-03-27 CVE-2009-0631 Features UDP Packet Denial of Service vulnerability in Cisco IOS
Unspecified vulnerability in Cisco IOS 12.0 through 12.4, when configured with (1) IP Service Level Agreements (SLAs) Responder, (2) Session Initiation Protocol (SIP), (3) H.323 Annex E Call Signaling Transport, or (4) Media Gateway Control Protocol (MGCP) allows remote attackers to cause a denial of service (blocked input queue on the inbound interface) via a crafted UDP packet.
network
low complexity
cisco
7.8
2008-09-26 CVE-2008-3811 Improper Input Validation vulnerability in Cisco IOS
Cisco IOS 12.2 and 12.4, when NAT Skinny Call Control Protocol (SCCP) Fragmentation Support is enabled, allows remote attackers to cause a denial of service (device reload) via segmented SCCP messages, aka Cisco Bug ID CSCsi17020, a different vulnerability than CVE-2008-3810.
network
low complexity
cisco CWE-20
7.8
2008-09-26 CVE-2008-3810 Improper Input Validation vulnerability in Cisco IOS
Cisco IOS 12.2 and 12.4, when NAT Skinny Call Control Protocol (SCCP) Fragmentation Support is enabled, allows remote attackers to cause a denial of service (device reload) via segmented SCCP messages, aka CSCsg22426, a different vulnerability than CVE-2008-3811.
network
low complexity
cisco CWE-20
7.8
2007-05-10 CVE-2007-2587 Multiple vulnerability in Cisco IOS FTP Server
The IOS FTP Server in Cisco IOS 11.3 through 12.4 allows remote authenticated users to cause a denial of service (IOS reload) via unspecified vectors involving transferring files (aka bug ID CSCse29244).
network
cisco
6.3