CERT-In Advisory CIAD-2007-41
Multiple vulnerabilities in Cisco IOS
Original issue date:
August 14, 2007
Systems Affected
• Session Initiation Protocol (SIP)
• Media Gateway Control Protocol (MGCP)
• Signaling protocols H.323, H.254
• Real-time Transport Protocol (RTP)
• Facsimile reception
• Cisco devices running IOS that are configured for NHRP
functionality are affected.
• Cisco IOS and Cisco IOS enabled for IPv6
• Cisco IOS Version 12.2 configured for Secure copy (SCP).
Overview
Multiple vulnerabilities have been reported in various components of Cisco IOS. This advisory describes these vulnerabilities.
Description
| CERT-In Vulnerability Notes |
| CIVN-2007-98: Vulnerabilities in Cisco IOS and Cisco Unified Communications Manager |
| CIVN-2007-99: Cisco IOS Next Hop Resolution Protocol Vulnerability |
| CIVN-2007-100: Cisco IOS Information Leakage Using IPv6 Routing Header |
CIVN-2007-101: Cisco IOS Secure Copy Authorization Bypass Vulnerability
|
Vendor Information
Cisco
http://www.cisco.com/
Disclaimer
The information provided herein is on "as is" basis, without warranty of any kind.
Contact Information

Phone: +91-11-24368572
Postal address
Indian Computer Emergency Response Team (CERT-In)
Ministry of Communications and Information Technology
Electronics Niketan
6, C.G.O. Complex
New Delhi-110 003

|