Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2012-0333 State: PUBLISHED Published: 2012-05-02T10:00:00 Last Updated: 2024-08-06T18:23:30.915Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Small Business IP phones with SPA 500 series firmware 7.4.9 and earlier do not require authentication for Push XML requests, which allows remote attackers to make telephone calls via an XML document, aka Bug ID CSCts08768. Additional Analyst Notes: - CVE Program Container: References: - http://www-europe.cisco.com/en/US/docs/voice_ip_comm/csbpipp/ip_phones/release/notes/spa525g_relnote_7_5_1.pdf - http://www.securitytracker.com/id?1027012
CVE ID: CVE-2012-0334 State: PUBLISHED Published: 2020-01-15T12:49:13 Last Updated: 2024-11-15T17:48:52.761Z Vendors: Cisco Products: IronPort Web Security Appliance AsyncOS Problem Types: Security Bypass Description: Cisco IronPort Web Security Appliance AsyncOS software prior to 7.5 has a SSL Certificate Caching vulnerability which could allow man-in-the-middle attacks Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/52981 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20120412-CVE-2012-0334
CVE ID: CVE-2012-0335 State: PUBLISHED Published: 2012-05-02T10:00:00 Last Updated: 2024-08-06T18:23:30.587Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 7.2 through 8.4 do not properly perform proxy authentication during attempts to cut through a firewall, which allows remote attackers to obtain sensitive information via a connection attempt, aka Bug ID CSCtx42746. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/web/software/280775065/89203/ASA-843-Interim-Release-Notes.html - http://www.securityfocus.com/bid/53558 - http://secunia.com/advisories/49139 - http://www.
-Interim-Release-Notes.html - http://www.securityfocus.com/bid/53558 - http://secunia.com/advisories/49139 - http://www.securitytracker.com/id?1027008
CVE ID: CVE-2012-0337 State: PUBLISHED Published: 2012-05-02T10:00:00Z Last Updated: 2024-09-17T01:56:24.553Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the web component in Cisco Unified MeetingPlace 7.1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCtx08939. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/docs/voice_ip_comm/meetingplace/7_1/english/release_notes/mp71rn.html
CVE ID: CVE-2012-0338 State: PUBLISHED Published: 2012-05-02T10:00:00 Last Updated: 2024-08-06T18:23:30.247Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS 12.2 through 12.4 and 15.0 does not recognize the vrf-also keyword during enforcement of access-class commands, which allows remote attackers to establish SSH connections from arbitrary source IP addresses via a standard SSH client, aka Bug ID CSCsv86113. Additional Analyst Notes: - CVE Program Container: References: - https://supportforums.cisco.com/thread/2030226 - http://www.cisco.com/en/US/docs/switches/lan/catalyst6500/ios/12.2SX/release/notes/caveats_SXH_rebuilds.html - http://www.securitytracker.com/id?1027005
CVE ID: CVE-2012-0339 State: PUBLISHED Published: 2012-05-02T10:00:00 Last Updated: 2024-08-06T18:23:30.556Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS 12.2 through 12.4 and 15.0 does not recognize the vrf-also keyword during enforcement of access-class commands, which allows remote attackers to establish TELNET connections from arbitrary source IP addresses via a standard TELNET client, aka Bug ID CSCsi77774. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1027005 - http://www.cisco.com/en/US/docs/switches/lan/catalyst6500/ios/12.2SXF/native/release/notes/caveats_SXF_rebuilds.html
CVE ID: CVE-2012-0340 State: PUBLISHED Published: 2012-02-13T22:00:00 Last Updated: 2024-08-06T18:23:30.536Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the management interface on the Cisco IronPort Encryption Appliance with software before 6.5.3 allows remote attackers to inject arbitrary web script or HTML via the header parameter to the default URI under admin/, aka bug ID 72410. Additional Analyst Notes: - CVE Program Container: References: - http://www.secureworks.com/research/advisories/SWRX-2012-001/ - http://tools.cisco.com/security/center/viewAlert.x?alertId=25045
CVE ID: CVE-2012-0352 State: PUBLISHED Published: 2012-02-16T21:00:00Z Last Updated: 2024-09-16T20:27:44.348Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco NX-OS 4.2.x before 4.2(1)SV1(5.1) on Nexus 1000v series switches; 4.x and 5.0.x before 5.0(2)N1(1) on Nexus 5000 series switches; and 4.2.x before 4.2.8, 5.0.x before 5.0.5, and 5.1.x before 5.1.1 on Nexus 7000 series switches allows remote attackers to cause a denial of service (netstack process crash and device reload) via a malformed IP packet, aka Bug IDs CSCti23447, CSCti49507, and CSCtj01991. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecuri
itional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120215-nxos
CVE ID: CVE-2012-0353 State: PUBLISHED Published: 2012-03-15T00:00:00 Last Updated: 2024-08-06T18:23:30.952Z Vendors: n/a Products: n/a Problem Types: n/a Description: The UDP inspection engine on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with software 8.0 before 8.0(5.25), 8.1 before 8.1(2.50), 8.2 before 8.2(5.5), 8.3 before 8.3(2.22), 8.4 before 8.4(2.1), and 8.5 before 8.5(1.2) does not properly handle flows, which allows remote attackers to cause a denial of service (device reload) via a crafted series of (1) IPv4 or (2) IPv6 UDP packets, aka Bug ID CSCtq10441. Additional Analyst Notes: - CVE
eload) via a crafted series of (1) IPv4 or (2) IPv6 UDP packets, aka Bug ID CSCtq10441. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/52484 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120314-asa - http://secunia.com/advisories/48423 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74029 - http://osvdb.org/80043 - http://www.securitytracker.com/id?1026800
CVE ID: CVE-2012-0354 State: PUBLISHED Published: 2012-03-15T00:00:00 Last Updated: 2024-08-06T18:23:30.622Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Threat Detection feature on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with software 8.0 through 8.2 before 8.2(5.20), 8.3 before 8.3(2.29), 8.4 before 8.4(3), 8.5 before 8.5(1.6), and 8.6 before 8.6(1.1) allows remote attackers to cause a denial of service (device reload) via (1) IPv4 or (2) IPv6 packets that trigger a shun event, aka Bug ID CSCtw35765. Additional Analyst Notes: - CVE Program Container: References: - http://tools
igger a shun event, aka Bug ID CSCtw35765. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120314-asa - http://secunia.com/advisories/48423 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74030 - http://osvdb.org/80044 - http://www.securityfocus.com/bid/52489 - http://www.securitytracker.com/id?1026800
CVE ID: CVE-2012-0355 State: PUBLISHED Published: 2012-03-15T00:00:00 Last Updated: 2024-08-06T18:23:30.669Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with software 8.4 before 8.4(2.11) and 8.5 before 8.5(1.4) allow remote attackers to cause a denial of service (device reload) via (1) IPv4 or (2) IPv6 packets that trigger syslog message 305006, aka Bug ID CSCts39634. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120314-asa - http://secunia.com
ences: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120314-asa - http://secunia.com/advisories/48423 - http://osvdb.org/80045 - http://www.securityfocus.com/bid/52488 - http://www.securitytracker.com/id?1026800
CVE ID: CVE-2012-0356 State: PUBLISHED Published: 2012-03-15T00:00:00 Last Updated: 2024-08-06T18:23:30.507Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with software 7.0 through 7.2 before 7.2(5.7), 8.0 before 8.0(5.27), 8.1 before 8.1(2.53), 8.2 before 8.2(5.8), 8.3 before 8.3(2.25), 8.4 before 8.4(2.5), and 8.5 before 8.5(1.2) and the Firewall Services Module (FWSM) 3.1 and 3.2 before 3.2(23) and 4.0 and 4.1 before 4.1(8) in Cisco Catalyst 6500 series devices, when multicast routing is enabled, allow remote attackers to cause a denial of s
in Cisco Catalyst 6500 series devices, when multicast routing is enabled, allow remote attackers to cause a denial of service (device reload) via a crafted IPv4 PIM message, aka Bug IDs CSCtr47517 and CSCtu97367. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120314-asa - http://osvdb.org/80041 - http://secunia.com/advisories/48423 - http://www.securitytracker.com/id?1026798 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120314-fwsm - https://exchange.xforce.ibmcloud.com/vulnerabilities/74028 - http://www.securitytracker.com/id?1026800 - http://secunia.com/adv
/exchange.xforce.ibmcloud.com/vulnerabilities/74028 - http://www.securitytracker.com/id?1026800 - http://secunia.com/advisories/48421
CVE ID: CVE-2012-0358 State: PUBLISHED Published: 2012-03-15T00:00:00 Last Updated: 2024-08-06T18:23:30.604Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Cisco Port Forwarder ActiveX control in cscopf.ocx, as distributed through the Clientless VPN feature on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 7.0 through 7.2 before 7.2(5.6), 8.0 before 8.0(5.26), 8.1 before 8.1(2.53), 8.2 before 8.2(5.18), 8.3 before 8.3(2.28), 8.2 before 8.4(2.16), and 8.6 before 8.6(1.1), allows remote attackers to execute arbitrary code via unspecified vectors, aka Bug ID CSCtr00165. Additional Analyst Notes: - CVE Program Container: References:
ary code via unspecified vectors, aka Bug ID CSCtr00165. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/339177 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120314-asaclient - https://exchange.xforce.ibmcloud.com/vulnerabilities/74027 - http://www.securitytracker.com/id?1026799
CVE ID: CVE-2012-0359 State: PUBLISHED Published: 2012-03-01T01:00:00 Last Updated: 2024-08-06T18:23:30.625Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Cisco Cius with software before 9.2(1) SR2 allows remote attackers to cause a denial of service (device crash or hang) via malformed network traffic, aka Bug ID CSCto71445. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2012-02/0186.html - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120229-cius
CVE ID: CVE-2012-0360 State: PUBLISHED Published: 2014-04-23T10:00:00 Last Updated: 2024-08-06T18:23:30.616Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in Cisco IOS before 15.1(1)SY, when IKEv2 debugging is enabled, allows remote attackers to cause a denial of service (memory consumption) via crafted packets, aka Bug ID CSCtn22376. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/ios/15-1SY/release_notes.pdf
CVE ID: CVE-2012-0361 State: PUBLISHED Published: 2012-05-02T10:00:00 Last Updated: 2024-08-06T18:23:30.633Z Vendors: n/a Products: n/a Problem Types: n/a Description: The sccp-protocol component in Cisco IP Communicator (CIPC) 7.0 through 8.6 does not limit the rate of SCCP messages to Cisco Unified Communications Manager (CUCM), which allows remote attackers to cause a denial of service via vectors that trigger (1) on hook and (2) off hook messages, as demonstrated by a Plantronics headset, aka Bug ID CSCti40315. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/docs/voice_ip_comm/cipc/8_5/english/release_notes/CIPC8x_RN.html - http://www.securityt
es: - http://www.cisco.com/en/US/docs/voice_ip_comm/cipc/8_5/english/release_notes/CIPC8x_RN.html - http://www.securitytracker.com/id?1027013
CVE ID: CVE-2012-0362 State: PUBLISHED Published: 2012-05-02T10:00:00 Last Updated: 2024-08-06T18:23:30.834Z Vendors: n/a Products: n/a Problem Types: n/a Description: The extended ACL functionality in Cisco IOS 12.2(58)SE2 and 15.0(1)SE discards all lines that end with a log or time keyword, which allows remote attackers to bypass intended access restrictions in opportunistic circumstances by sending network traffic, aka Bug ID CSCts01106. Additional Analyst Notes: - CVE Program Container: References: - http://puck.nether.net/pipermail/cisco-nsp/2012-February/083517.html - http://www.securitytracker.com/id?1027005
CVE ID: CVE-2012-0363 State: PUBLISHED Published: 2012-02-25T02:00:00 Last Updated: 2024-08-06T18:23:30.599Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web interface on Cisco SRP 520 series devices with firmware before 1.1.26 and SRP 520W-U and 540 series devices with firmware before 1.2.4 allows remote authenticated users to execute arbitrary commands via unspecified vectors, related to a "command injection vulnerability," aka Bug ID CSCtt46871. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120223-srp500 - http://www.securitytracker.com/id?1026736
CVE ID: CVE-2012-0364 State: PUBLISHED Published: 2012-02-25T02:00:00 Last Updated: 2024-08-06T18:23:30.494Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco SRP 520 series devices with firmware before 1.1.26 and SRP 520W-U and 540 series devices with firmware before 1.2.4 allow remote attackers to replace the configuration file via an upload request to an unspecified URL, aka Bug ID CSCtw55495. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120223-srp500 - http://www.securitytracker.com/id?1026736
CVE ID: CVE-2012-0365 State: PUBLISHED Published: 2012-02-25T02:00:00 Last Updated: 2024-08-06T18:23:30.491Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the Local TFTP file-upload application on Cisco SRP 520 series devices with firmware before 1.1.26 and SRP 520W-U and 540 series devices with firmware before 1.2.4 allows remote authenticated users to upload software to arbitrary directories via unspecified vectors, aka Bug ID CSCtw56009. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120223-srp500 - http://www.securitytracker.com/id?1026736
CVE ID: CVE-2012-0366 State: PUBLISHED Published: 2012-03-01T01:00:00Z Last Updated: 2024-09-16T19:46:51.687Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Unity Connection before 7.1.3b(Su2) allows remote authenticated users to change the administrative password by leveraging the Help Desk Administrator role, aka Bug ID CSCtd45141. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120229-cuc
CVE ID: CVE-2012-0367 State: PUBLISHED Published: 2012-03-01T01:00:00Z Last Updated: 2024-09-16T23:46:05.275Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Unity Connection before 7.1.5b(Su5), 8.0 and 8.5 before 8.5.1(Su3), and 8.6 before 8.6.2 allows remote attackers to cause a denial of service (services crash) via a series of crafted TCP segments, aka Bug ID CSCtq67899. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120229-cuc
CVE ID: CVE-2012-0368 State: PUBLISHED Published: 2012-03-01T01:00:00 Last Updated: 2024-08-06T18:23:30.977Z Vendors: n/a Products: n/a Problem Types: n/a Description: The administrative management interface on Cisco Wireless LAN Controller (WLC) devices with software 4.x, 5.x, 6.0, and 7.0 before 7.0.220.0, 7.1 before 7.1.91.0, and 7.2 before 7.2.103.0 allows remote attackers to cause a denial of service (device crash) via a malformed URL in an HTTP request, aka Bug ID CSCts81997. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120229-wlc - http://archives.neohapsis.com/archives/bugtraq/2012-02/
ity/center/content/CiscoSecurityAdvisory/cisco-sa-20120229-wlc - http://archives.neohapsis.com/archives/bugtraq/2012-02/0188.html
CVE ID: CVE-2012-0369 State: PUBLISHED Published: 2012-03-01T01:00:00 Last Updated: 2024-08-06T18:23:30.618Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Wireless LAN Controller (WLC) devices with software 6.0 and 7.0 before 7.0.220.0, 7.1 before 7.1.91.0, and 7.2 before 7.2.103.0 allow remote attackers to cause a denial of service (device reload) via a sequence of IPv6 packets, aka Bug ID CSCtt07949. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120229-wlc - http://archives.neohapsis.com/archives/bugtraq/2012-02/0188.html
CVE ID: CVE-2012-0370 State: PUBLISHED Published: 2012-03-01T01:00:00 Last Updated: 2024-08-06T18:23:31.008Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Wireless LAN Controller (WLC) devices with software 4.x, 5.x, 6.0, and 7.0 before 7.0.220.0 and 7.1 before 7.1.91.0, when WebAuth is enabled, allow remote attackers to cause a denial of service (device reload) via a sequence of (1) HTTP or (2) HTTPS packets, aka Bug ID CSCtt47435. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120229-wlc - http://archives.neohapsis.com/archives/bugtraq/2012-02/0188.html
CVE ID: CVE-2012-0371 State: PUBLISHED Published: 2012-03-01T01:00:00 Last Updated: 2024-08-06T18:23:30.947Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Wireless LAN Controller (WLC) devices with software 4.x, 5.x, 6.0, and 7.0 before 7.0.220.4, when CPU-based ACLs are enabled, allow remote attackers to read or modify the configuration via unspecified vectors, aka Bug ID CSCtu56709. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120229-wlc - http://archives.neohapsis.com/archives/bugtraq/2012-02/0188.html
CVE ID: CVE-2012-0376 State: PUBLISHED Published: 2012-05-03T20:00:00Z Last Updated: 2024-09-17T02:42:31.084Z Vendors: n/a Products: n/a Problem Types: n/a Description: The voice-sipstack component in Cisco Unified Communications Manager (CUCM) 8.5 allows remote attackers to cause a denial of service (core dump) via vectors involving SIP messages that arrive after an upgrade, aka Bug ID CSCtj87367. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/docs/voice_ip_comm/cucmbe/rel_notes/8_5_1/cucmbe-rel_notes-851.html
CVE ID: CVE-2012-0378 State: PUBLISHED Published: 2012-05-03T20:00:00Z Last Updated: 2024-09-16T17:24:20.899Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.0 through 8.4 allow remote attackers to cause a denial of service (connection limit exceeded) by triggering a large number of stale connections that result in an incorrect value for an MPF connection count, aka Bug ID CSCtv19854. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/web/software/280775065/89203/ASA-843-Interim-Release-Notes.html
CVE ID: CVE-2012-0381 State: PUBLISHED Published: 2012-03-29T10:00:00 Last Updated: 2024-08-06T18:23:30.996Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IKEv1 implementation in Cisco IOS 12.2 through 12.4 and 15.0 through 15.2 and IOS XE 2.1.x through 2.6.x and 3.1.xS through 3.4.xS before 3.4.2S, 3.5.xS before 3.5.1S, and 3.2.xSG before 3.2.2SG allows remote attackers to cause a denial of service (device reload) by sending IKE UDP packets over (1) IPv4 or (2) IPv6, aka Bug ID CSCts38429. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/52757 - http://osvdb.org/80700 - http://secunia.com/advisories/48605 - https://exchange.x
tp://www.securityfocus.com/bid/52757 - http://osvdb.org/80700 - http://secunia.com/advisories/48605 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74427 - http://www.securitytracker.com/id?1026863 - http://secunia.com/advisories/48607 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120328-ike
CVE ID: CVE-2012-0382 State: PUBLISHED Published: 2012-03-29T10:00:00 Last Updated: 2024-08-06T18:23:31.013Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Multicast Source Discovery Protocol (MSDP) implementation in Cisco IOS 12.0, 12.2 through 12.4, and 15.0 through 15.2 and IOS XE 2.1.x through 2.6.x and 3.1.xS through 3.4.xS before 3.4.1S and 3.1.xSG and 3.2.xSG before 3.2.2SG allows remote attackers to cause a denial of service (device reload) via encapsulated IGMP data in an MSDP packet, aka Bug ID CSCtr28857. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1026868 - http://secunia.com/advisories/48630 - http://www.secu
ntainer: References: - http://www.securitytracker.com/id?1026868 - http://secunia.com/advisories/48630 - http://www.securityfocus.com/bid/52759 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120328-msdp - http://osvdb.org/80693 - http://secunia.com/advisories/48633 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74431
CVE ID: CVE-2012-0383 State: PUBLISHED Published: 2012-03-29T10:00:00 Last Updated: 2024-08-06T18:23:31.041Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in the NAT feature in Cisco IOS 12.4, 15.0, and 15.1 allows remote attackers to cause a denial of service (memory consumption, and device hang or reload) via SIP packets that require translation, related to a "memory starvation vulnerability," aka Bug ID CSCti35326. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/80701 - http://www.securityfocus.com/bid/52758 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74432 - http://secunia.com/advisories/48515 - http://www.securitytrac
tps://exchange.xforce.ibmcloud.com/vulnerabilities/74432 - http://secunia.com/advisories/48515 - http://www.securitytracker.com/id?1026864 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120328-nat