9

CVE-2009-0628

Memory leak in the SSLVPN feature in Cisco IOS 12.3 through 12.4 allows remote attackers to cause a denial of service (memory consumption and device crash) by disconnecting an SSL session in an abnormal manner, leading to a Transmission Control Block (TCB) leak.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Cisco ≫ Cisco Ios Version 12.3
Cisco ≫ Cisco Ios Version 12.3 Update b
Cisco ≫ Cisco Ios Version 12.3 Update bc
Cisco ≫ Cisco Ios Version 12.3 Update bw
Cisco ≫ Cisco Ios Version 12.3 Update eu
Cisco ≫ Cisco Ios Version 12.3 Update ja
Cisco ≫ Cisco Ios Version 12.3 Update jea
Cisco ≫ Cisco Ios Version 12.3 Update jeb
Cisco ≫ Cisco Ios Version 12.3 Update jec
Cisco ≫ Cisco Ios Version 12.3 Update jk
Cisco ≫ Cisco Ios Version 12.3 Update jl
Cisco ≫ Cisco Ios Version 12.3 Update jx
Cisco ≫ Cisco Ios Version 12.3 Update t
Cisco ≫ Cisco Ios Version 12.3 Update tpc
Cisco ≫ Cisco Ios Version 12.3 Update va
Cisco ≫ Cisco Ios Version 12.3 Update xa
Cisco ≫ Cisco Ios Version 12.3 Update xb
Cisco ≫ Cisco Ios Version 12.3 Update xc
Cisco ≫ Cisco Ios Version 12.3 Update xd
Cisco ≫ Cisco Ios Version 12.3 Update xe
Cisco ≫ Cisco Ios Version 12.3 Update xf
Cisco ≫ Cisco Ios Version 12.3 Update xg
Cisco ≫ Cisco Ios Version 12.3 Update xh
Cisco ≫ Cisco Ios Version 12.3 Update xi
Cisco ≫ Cisco Ios Version 12.3 Update xj
Cisco ≫ Cisco Ios Version 12.3 Update xk
Cisco ≫ Cisco Ios Version 12.3 Update xq
Cisco ≫ Cisco Ios Version 12.3 Update xr
Cisco ≫ Cisco Ios Version 12.3 Update xs
Cisco ≫ Cisco Ios Version 12.3 Update xu
Cisco ≫ Cisco Ios Version 12.3 Update xw
Cisco ≫ Cisco Ios Version 12.3 Update xy
Cisco ≫ Cisco Ios Version 12.3 Update ya
Cisco ≫ Cisco Ios Version 12.3 Update yd
Cisco ≫ Cisco Ios Version 12.3 Update yf
Cisco ≫ Cisco Ios Version 12.3 Update yg
Cisco ≫ Cisco Ios Version 12.3 Update yh
Cisco ≫ Cisco Ios Version 12.3 Update yi
Cisco ≫ Cisco Ios Version 12.3 Update yj
Cisco ≫ Cisco Ios Version 12.3 Update yk
Cisco ≫ Cisco Ios Version 12.3 Update ym
Cisco ≫ Cisco Ios Version 12.3 Update yq
Cisco ≫ Cisco Ios Version 12.3 Update ys
Cisco ≫ Cisco Ios Version 12.3 Update yt
Cisco ≫ Cisco Ios Version 12.3 Update yu
Cisco ≫ Cisco Ios Version 12.3 Update yx
Cisco ≫ Cisco Ios Version 12.3 Update yz
Cisco ≫ Cisco Ios Version 12.4
Cisco ≫ Cisco Ios Version 12.4 Update ja
Cisco ≫ Cisco Ios Version 12.4 Update jk
Cisco ≫ Cisco Ios Version 12.4 Update jma
Cisco ≫ Cisco Ios Version 12.4 Update jmb
Cisco ≫ Cisco Ios Version 12.4 Update jmc
Cisco ≫ Cisco Ios Version 12.4 Update jx
Cisco ≫ Cisco Ios Version 12.4 Update md
Cisco ≫ Cisco Ios Version 12.4 Update mr
Cisco ≫ Cisco Ios Version 12.4 Update sw
Cisco ≫ Cisco Ios Version 12.4 Update t
Cisco ≫ Cisco Ios Version 12.4 Update xa
Cisco ≫ Cisco Ios Version 12.4 Update xb
Cisco ≫ Cisco Ios Version 12.4 Update xc
Cisco ≫ Cisco Ios Version 12.4 Update xd
Cisco ≫ Cisco Ios Version 12.4 Update xe
Cisco ≫ Cisco Ios Version 12.4 Update xf
Cisco ≫ Cisco Ios Version 12.4 Update xg
Cisco ≫ Cisco Ios Version 12.4 Update xj
Cisco ≫ Cisco Ios Version 12.4 Update xk
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.93% 0.773
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 9 10 8.5
AV:N/AC:L/Au:N/C:P/I:P/A:C
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

http://www.cisco.com/en/US/products/products_security_advisory09186a0080a90469.shtml
Vendor Advisory
http://secunia.com/advisories/34438
Vendor Advisory
http://securitytracker.com/id?1021896
http://www.cisco.com/en/US/products/products_security_advisory09186a0080a90424.shtml
Vendor Advisory
http://www.securityfocus.com/bid/34239
http://www.vupen.com/english/advisories/2009/0851
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/49427
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12092