Cisco IOS 11.2.x and 12.0.x does not limit the size of its redirect table, which allows remote attackers to cause a denial of service (memory consumption) via spoofed ICMP redirect packets to the router.
https://euvd.enisa.europa.eu/vulnerability/EUVD-2002-2293
http://www.securityfocus.com/bid/4786
http://www.iss.net/security_center/static/9129.php