HOME > ADVISORIES


   ADVISORIES

CERT-In Advisory CIAD-2007-41
Multiple vulnerabilities in Cisco IOS

Original issue date: August 14, 2007

Systems Affected

• Session Initiation Protocol (SIP)
• Media Gateway Control Protocol (MGCP)
• Signaling protocols H.323, H.254
• Real-time Transport Protocol (RTP)
• Facsimile reception
• Cisco devices running IOS that are configured for NHRP functionality are affected.
• Cisco IOS and Cisco IOS enabled for IPv6
• Cisco IOS Version 12.2 configured for Secure copy (SCP).

Overview

Multiple vulnerabilities have been reported in various components of Cisco IOS. This advisory describes these vulnerabilities.

Description

CERT-In Vulnerability Notes
CIVN-2007-98: Vulnerabilities in Cisco IOS and Cisco Unified Communications Manager
CIVN-2007-99: Cisco IOS Next Hop Resolution Protocol Vulnerability
CIVN-2007-100: Cisco IOS Information Leakage Using IPv6 Routing Header
CIVN-2007-101: Cisco IOS Secure Copy Authorization Bypass Vulnerability

Vendor Information

Cisco
http://www.cisco.com/

Disclaimer

The information provided herein is on "as is" basis, without warranty of any kind.

Contact Information


Phone: +91-11-24368572

Postal address

Indian Computer Emergency Response Team (CERT-In)
Ministry of Communications and Information Technology
Electronics Niketan
6, C.G.O. Complex
New Delhi-110 003