Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CVE-2009-0628

EPSS 1.57% · P82
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2009-0628

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Memory leak in the SSLVPN feature in Cisco IOS 12.3 through 12.4 allows remote attackers to cause a denial of service (memory consumption and device crash) by disconnecting an SSL session in an abnormal manner, leading to a Transmission Control Block (TCB) leak.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Cisco IOS WebVPN/SSLVPN 内存泄露漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Cisco IOS是美国思科(Cisco)公司为其网络设备开发的操作系统。 Cisco SSLVPN功能是增强版本的WebVPN功能,允许Internet中任意位置的用户远程访问企业站点。 配置了SSLVPN的设备在处理异常断开的SSL会话时可能泄露TCB,持续攻击可能导致设备耗尽内存资源而崩溃。无需认证便可利用这个漏洞。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2009-0628

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2009-0628

登录查看更多情报信息。

Same Patch Batch · n/a · 2009-03-27 · 15 CVEs total

CVE-2009-0590OpenSSL 缓冲区错误漏洞
CVE-2009-0591OpenSSL 授权问题漏洞
CVE-2009-0626Cisco IOS WebVPN/SSLVPN HTTPS报文 远程拒绝服务漏洞
CVE-2009-0629Cisco IOS 安全漏洞
CVE-2009-0630Cisco IOS多个功能IP套接字拒绝服务漏洞
CVE-2009-0633Cisco IOS移动IP/移动IPv6功能多个远程拒绝服务漏洞
CVE-2009-0634Cisco IOS移动IP/移动IPv6功能 HA功能多个远程拒绝服务漏洞
CVE-2009-0635Cisco IOS cTCP协议远程拒绝服务漏洞
CVE-2009-0636Cisco IOS会话初始协议拒绝服务漏洞
CVE-2009-0637Cisco IOS 权限许可和访问控制问题漏洞
CVE-2009-0789OpenSSL 数字错误漏洞
CVE-2009-0845MIT Kerberos NegTokenInit令牌处理远程拒绝服务漏洞
CVE-2009-0631Cisco IOS多个功能UDP报文拒绝服务漏洞
CVE-2009-1169Mozilla Firefox XSL解析root XML标签内存破坏漏洞

IV. Related Vulnerabilities

V. Comments for CVE-2009-0628

No comments yet


Leave a comment