Vulnerabilities > Cisco

DATE CVE VULNERABILITY TITLE RISK
2008-09-26 CVE-2008-3806 Unspecified vulnerability in Cisco IOS
Cisco IOS 12.0 through 12.4 on Cisco 10000, uBR10012 and uBR7200 series devices handles external UDP packets that are sent to 127.0.0.0/8 addresses intended for IPC communication within the device, which allows remote attackers to cause a denial of service (device or linecard reload) via crafted UDP packets, a different vulnerability than CVE-2008-3805.
network
low complexity
cisco
8.5
2008-09-26 CVE-2008-3805 Unspecified vulnerability in Cisco IOS
Cisco IOS 12.0 through 12.4 on Cisco 10000, uBR10012 and uBR7200 series devices handles external UDP packets that are sent to 127.0.0.0/8 addresses intended for IPC communication within the device, which allows remote attackers to cause a denial of service (device or linecard reload) via crafted UDP packets, a different vulnerability than CVE-2008-3806.
network
low complexity
cisco
8.5
2008-09-26 CVE-2008-3804 Unspecified vulnerability in Cisco IOS 12.2/12.4
Unspecified vulnerability in the Multi Protocol Label Switching (MPLS) Forwarding Infrastructure (MFI) in Cisco IOS 12.2 and 12.4 allows remote attackers to cause a denial of service (memory corruption) via crafted packets for which the software path is used.
network
cisco
7.1
2008-09-26 CVE-2008-3803 Unspecified vulnerability in Cisco IOS 12.0S/12.0Sx/12.0Sz
A "logic error" in Cisco IOS 12.0 through 12.4, when a Multiprotocol Label Switching (MPLS) VPN with extended communities is configured, sometimes causes a corrupted route target (RT) to be used, which allows remote attackers to read traffic from other VPNs in opportunistic circumstances.
network
high complexity
cisco
5.1
2008-09-26 CVE-2008-3802 Unspecified vulnerability in Cisco IOS
Unspecified vulnerability in the Session Initiation Protocol (SIP) implementation in Cisco IOS 12.2 through 12.4, when VoIP is configured, allows remote attackers to cause a denial of service (device reload) via unspecified valid SIP messages, aka Cisco bug ID CSCsk42759, a different vulnerability than CVE-2008-3800 and CVE-2008-3801.
network
cisco
7.1
2008-09-26 CVE-2008-3801 Unspecified vulnerability in Cisco products
Unspecified vulnerability in the Session Initiation Protocol (SIP) implementation in Cisco IOS 12.2 through 12.4 and Unified Communications Manager 4.1 through 6.1, when VoIP is configured, allows remote attackers to cause a denial of service (device or process reload) via unspecified valid SIP messages, aka Cisco Bug ID CSCsm46064, a different vulnerability than CVE-2008-3800 and CVE-2008-3802.
network
cisco
7.1
2008-09-26 CVE-2008-3800 Unspecified vulnerability in Cisco products
Unspecified vulnerability in the Session Initiation Protocol (SIP) implementation in Cisco IOS 12.2 through 12.4 and Unified Communications Manager 4.1 through 6.1, when VoIP is configured, allows remote attackers to cause a denial of service (device or process reload) via unspecified valid SIP messages, aka Cisco Bug ID CSCsu38644, a different vulnerability than CVE-2008-3801 and CVE-2008-3802.
network
cisco
7.1
2008-09-26 CVE-2008-3799 Missing Release of Resource after Effective Lifetime vulnerability in Cisco IOS 12.2/12.3/12.4
Memory leak in the Session Initiation Protocol (SIP) implementation in Cisco IOS 12.2 through 12.4, when VoIP is configured, allows remote attackers to cause a denial of service (memory consumption and voice-service outage) via unspecified valid SIP messages.
network
low complexity
cisco CWE-772
7.8
2008-09-26 CVE-2008-3798 Unspecified vulnerability in Cisco IOS 12.4/12.4Mr
Cisco IOS 12.4 allows remote attackers to cause a denial of service (device crash) via a normal, properly formed SSL packet that occurs during termination of an SSL session.
network
low complexity
cisco
7.8
2008-09-26 CVE-2008-2739 Unspecified vulnerability in Cisco IOS
The SERVICE.DNS signature engine in the Intrusion Prevention System (IPS) in Cisco IOS 12.3 and 12.4 allows remote attackers to cause a denial of service (device crash or hang) via network traffic that triggers unspecified IPS signatures, a different vulnerability than CVE-2008-1447.
network
low complexity
cisco
7.8