CVE-2013-5497
https://notcve.org/view.php?id=CVE-2013-5497
The authentication manager process in the web framework in Cisco Intrusion Prevention System (IPS) does not properly handle user tokens, which allows remote attackers to cause a denial of service (intermittent MainApp hang) via a crafted management-interface connection request, aka Bug ID CSCuf20148. El proceso gestor de autenticación en el framework web en Cisco Intrusion Prevention System (IPS) no maneja adecuadamente tokens de usuario, lo que permite a atacantes remotos provocar una denegación de servicio (caída intermitente de MainApp) a través de una petición de conexión de una interfaz de gestión manipulada. Aka Bug ID CSCuf20148. • http://osvdb.org/97525 http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5497 http://tools.cisco.com/security/center/viewAlert.x?alertId=30913 http://www.securityfocus.com/bid/62517 http://www.securitytracker.com/id/1029057 https://exchange.xforce.ibmcloud.com/vulnerabilities/87280 • CWE-287: Improper Authentication •
CVE-2013-3411
https://notcve.org/view.php?id=CVE-2013-3411
The IDSM-2 drivers in Cisco Intrusion Prevention System (IPS) Software on Cisco Catalyst 6500 devices with an IDSM-2 module allow remote attackers to cause a denial of service (device hang) via malformed IPv4 TCP packets, aka Bug ID CSCuh27460. Los drivers IDSM-2 en Cisco Intrusion Prevention System (IPS) Software en Cisco Catalyst 6500 con el módulo IDSM-2 module permite a atacantes remotos provocar una denegación de servicio (cuelgue del dispositivo) a través de paquetes TCP IPv4 malformados, también conocido como Bug ID CSCuh27460. • http://secunia.com/advisories/54242 http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130717-ips •
CVE-2013-3410
https://notcve.org/view.php?id=CVE-2013-3410
Cisco Intrusion Prevention System (IPS) Software on IPS NME devices before 7.0(9)E4 allows remote attackers to cause a denial of service (device reload) via malformed IPv4 packets that trigger incorrect memory allocation, aka Bug ID CSCua61977. Cisco Intrusion Prevention System (IPS) Software en dispositivos IPS NME anterior a v7.0(9)E4 permite a atacantes remotos causar una denegación de servicio (reinicio del dispositivo) mediante paquetes IPv4 malformados que lanzan una incorrecta asignación de memoria, también conocido con el bug ID CSCua61977. • http://secunia.com/advisories/54243 http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130717-ips • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVE-2013-1218
https://notcve.org/view.php?id=CVE-2013-1218
Cisco Intrusion Prevention System (IPS) Software in ASA 5500-X IPS-SSP software modules before 7.1(7)sp1E4 allows remote attackers to cause a denial of service (Analysis Engine process hang or device reload) via fragmented (1) IPv4 or (2) IPv6 packets, aka Bug ID CSCue51272. Cisco Intrusion Prevention System (IPS) Software en ASA 5500-X IPS-SSP anterior a v7.1(7)sp1E4 permite a atacantes remotos causar una denegación de servicio (cuelgue del proceso Analysis Engine o reinicio del dispositivo) mediante paquetes (1) IPv4 o (2) IPv6 fragmentados, también conocido como Bug ID CSCue51272. • http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130717-ips • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVE-2013-1243
https://notcve.org/view.php?id=CVE-2013-1243
The IP stack in Cisco Intrusion Prevention System (IPS) Software in ASA 5500-X IPS-SSP software and hardware modules before 7.1(5)E4, IPS 4500 sensors before 7.1(6)E4, and IPS 4300 sensors before 7.1(5)E4 allows remote attackers to cause a denial of service (MainApp process hang) via malformed IPv4 packets, aka Bug ID CSCtx18596. La pila IP en Cisco Intrusion Prevention System (IPS) Software en ASA 5500-X IPS-SSP y módulos hardware anterior a v7.1(5)E4, sensores IPS 4500 anterior a v7.1(6)E4, y sensores IPS 4300 anterior a v7.1(5)E4 permite a atacantes remotos causar una denegación de servicio (cuelgue del proceso MainApp ) mediante paquetes IPv4 malformados, también conocido como Bug ID CSCtx18596. • http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130717-ips • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •