exploits , vulnerabilities , articles , Cisco IOS Specially Crafted Encryption Packet Denial of Service Vulnerability

Title	Cisco IOS Specially Crafted Encryption Packet Denial of Service Vulnerability
Published	2009-09-23-12:00AM
Updated	2009-09-23-05:30PM
Class	Design Error
CVE	CVE-2009-2871
Remote	Yes
Local	No
Credit	Cisco
Vulnerable	Cisco IOS XE 2.3.1 t Cisco IOS XE 2.3.1 Cisco IOS 12.4YA Cisco IOS 12.4XZ Cisco IOS 12.4XY Cisco IOS 12.4XW Cisco IOS 12.4XV Cisco IOS 12.4XR Cisco IOS 12.4XQ Cisco IOS 12.4XK Cisco IOS 12.4XJ Cisco IOS 12.4XF Cisco IOS 12.4T Cisco IOS 12.4SW Cisco IOS 12.4MR Cisco IOS 12.4MD Cisco IOS 12.2XND Cisco IOS 12.2XNC Cisco IOS 12.2XNB Cisco IOS 12.2XNA
Not Vulnerable	Cisco IOS XE 2.3.2 Cisco IOS 12.4(22)XR Cisco IOS 12.4(19)MR3 Cisco IOS 12.4(15)XR7 Cisco IOS 12.4(15)T4 Cisco IOS 12.4(15)T10 Cisco IOS 12.4(15)MD3
Code	To exploit this issue, attackers can use readily available network utilities.
TXT

Vulnerabilities - newest 10 RSS | More

• 2009-12-16 Merkaartor Insecure Temporary File Creation Vulnerability
• 2009-12-15 TYPO3 Watchdog (aba_watchdog) Unspecified Information Disclosure Vulnerability
• 2009-12-15 PostgreSQL Index Function Session State Modification Local Privilege Escalation Vulnerability
• 2009-12-15 PostgreSQL NULL Character CA SSL Certificate Validation Security Bypass Vulnerability
• 2009-12-15 IBM DB2 prior to 9.5 Fix Pack 5 Multiple Unspecified Security Vulnerabilities
• 2009-12-15 Sun Ray Server Software Desktop Session Handling Local Security Bypass Vulnerability
• 2009-12-15 Mozilla Firefox Sage Extension RSS Feeds Cross Domain Scripting Vulnerability
• 2009-12-15 Adobe Reader and Acrobat (CVE-2009-4324) Remote Code Execution Vulnerability
• 2009-12-14 Microsoft Protected Extensible Authentication Protocol Authentication Bypass Vulnerability
• 2009-12-14 Google Chrome DNS Pre-Fetching Proxy Cache Information Disclosure Vulnerability

• Vulnerabilities
• Exploits
• News
• Articles

Copyright 2007, SecurityDot
Wed, 16 Dec 2009 09:39:54 +0000