exploits , vulnerabilities , articles , Cisco IOS Multicast Virtual Private Network MDT Data Join Handling Vulnerability

Title	Cisco IOS Multicast Virtual Private Network MDT Data Join Handling Vulnerability
Published	2008-03-26-12:00AM
Updated	2008-03-26-09:19PM
Class	Design Error
CVE	CVE-2008-1156
Remote	Yes
Local	No
Credit	The vendor disclosed this issue.
Vulnerable	Cisco IOS 12.3 XY Cisco IOS 12.3 BW Cisco IOS 12.2 ZY Cisco IOS 12.2 ZP Cisco IOS 12.2 ZL Cisco IOS 12.2 ZJ Cisco IOS 12.2 ZH Cisco IOS 12.2 ZG Cisco IOS 12.2 ZF Cisco IOS 12.2 ZE Cisco IOS 12.2 ZC Cisco IOS 12.2 ZA Cisco IOS 12.2 YZ Cisco IOS 12.2 YX Cisco IOS 12.2 YV Cisco IOS 12.2 YU Cisco IOS 12.2 YT Cisco IOS 12.2 YR Cisco IOS 12.2 YQ Cisco IOS 12.2 YN Cisco IOS 12.2 YM Cisco IOS 12.2 YL Cisco IOS 12.2 YJ Cisco IOS 12.2 YH Cisco IOS 12.2 XN Cisco IOS 12.2 UZ Cisco IOS 12.2 T Cisco IOS 12.2 SZ Cisco IOS 12.2 SY Cisco IOS 12.2 SXF Cisco IOS 12.2 SXE Cisco IOS 12.2 SXD Cisco IOS 12.2 SXB Cisco IOS 12.2 SXA Cisco IOS 12.2 SX Cisco IOS 12.2 SW Cisco IOS 12.2 SV Cisco IOS 12.2 SU Cisco IOS 12.2 SRB Cisco IOS 12.2 SRA Cisco IOS 12.2 SO Cisco IOS 12.2 SM Cisco IOS 12.2 SGA Cisco IOS 12.2 SG Cisco IOS 12.2 SEG Cisco IOS 12.2 SEE Cisco IOS 12.2 SED Cisco IOS 12.2 SED Cisco IOS 12.2 SEC Cisco IOS 12.2 SEB Cisco IOS 12.2 SEA Cisco IOS 12.2 SE Cisco IOS 12.2 SBC Cisco IOS 12.2 S Cisco IOS 12.2 MC Cisco IOS 12.2 JA Cisco IOS 12.2 IXD Cisco IOS 12.2 IXC Cisco IOS 12.2 IXB Cisco IOS 12.2 IXA Cisco IOS 12.2 FZ Cisco IOS 12.2 EY Cisco IOS 12.2 EX Cisco IOS 12.2 EWA Cisco IOS 12.2 EW Cisco IOS 12.2 EU Cisco IOS 12.2 CX Cisco IOS 12.2 BZ Cisco IOS 12.2 BC Cisco IOS 12.2 B Cisco IOS 12.0 SZ Cisco IOS 12.0 SY Cisco IOS 12.0 SX Cisco IOS 12.0 S Cisco IOS 12.4XT Cisco IOS 12.4XK Cisco IOS 12.4XJ Cisco IOS 12.4XG Cisco IOS 12.4XE Cisco IOS 12.4XD Cisco IOS 12.4XC Cisco IOS 12.4XB Cisco IOS 12.4XA Cisco IOS 12.4T Cisco IOS 12.4SW Cisco IOS 12.4.MR Cisco IOS 12.4.MD Cisco IOS 12.3YZ Cisco IOS 12.3YX Cisco IOS 12.3YU Cisco IOS 12.3YT Cisco IOS 12.3YS Cisco IOS 12.3YQ Cisco IOS 12.3YK Cisco IOS 12.3YI Cisco IOS 12.3YH Cisco IOS 12.3YG Cisco IOS 12.3YF Cisco IOS 12.3YD Cisco IOS 12.3YA Cisco IOS 12.3XW Cisco IOS 12.3XU Cisco IOS 12.3XS Cisco IOS 12.3XR Cisco IOS 12.3XQ Cisco IOS 12.3XK Cisco IOS 12.3XJ Cisco IOS 12.3XI Cisco IOS 12.3XH Cisco IOS 12.3XG Cisco IOS 12.3XF Cisco IOS 12.3XE Cisco IOS 12.3XD Cisco IOS 12.3XC Cisco IOS 12.3XB Cisco IOS 12.3XA Cisco IOS 12.3TPC Cisco IOS 12.3T Cisco IOS 12.3JK Cisco IOS 12.3BC Cisco IOS 12.3B Cisco IOS 12.3.VA Cisco IOS 12.3
Not Vulnerable	Cisco IOS 12.4 (9)XG2 Cisco IOS 12.4 (6)XT2 Cisco IOS 12.4 (4)XD10 Cisco IOS 12.4 (16)MR2 Cisco IOS 12.4 (15)TA4 Cisco IOS 12.4 (15)SW Cisco IOS 12.4 (15)MD Cisco IOS 12.3 (8)JK1 Cisco IOS 12.3 (7)XR8 Cisco IOS 12.3 (23)BC1 Cisco IOS 12.3 (2)XA7 Cisco IOS 12.3 (14)YX11 Cisco IOS 12.3 (14)YM12 Cisco IOS 12.2 (44)SG Cisco IOS 12.2 (44)SG Cisco IOS 12.2 (44)SE1 Cisco IOS 12.2 (40)EX1 Cisco IOS 12.2 (33)SRB3 Cisco IOS 12.2 (33)SRA7 Cisco IOS 12.2 (31)SGA5 Cisco IOS 12.2 (29b)SV Cisco IOS 12.2 (29)SVD Cisco IOS 12.2 (28)SB12 Cisco IOS 12.2 (25)SEG4 Cisco IOS 12.2 (25)S15 Cisco IOS 12.2 (25)EWA13 Cisco IOS 12.2 (18)SXF13 Cisco IOS 12.0 (32)SY5 Cisco IOS 12.0 (32)S10 Cisco IOS 12.0 (1)S Cisco IOS 12.4(18a) Cisco IOS 12.3(26)
Code	Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: content@securitydot.net
TXT

Vulnerabilities - newest 10 RSS | More

2008-12-02 xrdp Multiple Buffer Overflow Vulnerabilities
2008-12-02 FFmpeg Multiple Denial of Service Vulnerabilities
2008-12-01 SystemImager Flamethrower Insecure Temporary File Creation Vulnerabilities
2008-12-01 Rumpus FTP Server Command Argument Remote Buffer Overflow Vulnerability
2008-12-01 Rumpus FTP Server HTTP Command Remote Denial of Service Vulnerability
2008-11-29 Multiple ActiveWebSoftwares Products Login Parameters SQL Injection Vulnerabilities
2008-11-29 Venalsur Booking Centre Multiple Cross-Site Scripting Vulnerabilities
2008-11-28 ReVou Login SQL Injection Vulnerability
2008-11-28 Web Calendar System SQL Injection and Cross Site Scripting Vulnerabilities
2008-11-28 SailPlanner Login SQL Injection Vulnerability