[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

248149

 
 

909

 
 

194803

 
 

282

Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2007-0918Date: (C)2007-02-13   (M)2023-12-22


The ATOMIC.TCP signature engine in the Intrusion Prevention System (IPS) feature for Cisco IOS 12.4XA, 12.3YA, 12.3T, and other trains allows remote attackers to cause a denial of service (IPS crash and traffic loss) via unspecified manipulations that are not properly handled by the regular expression feature, as demonstrated using the 3123.0 (Netbus Pro Traffic) signature.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 7.1
Exploit Score: 8.6
Impact Score: 6.9
 
CVSS V2 Metrics:
Access Vector: NETWORK
Access Complexity: MEDIUM
Authentication: NONE
Confidentiality: NONE
Integrity: NONE
Availability: COMPLETE
  
Reference:
SECTRACK-1017631
http://www.cisco.com/en/US/products/products_security_advisory09186a00807e0a5b.shtml
BID-22549
SECUNIA-24142
OSVDB-33053
ADV-2007-0597
cisco-ios-ips-dos(32474)
http://www.cisco.com/en/US/products/products_security_response09186a00807e0a5e.html
oval:org.mitre.oval:def:5832

CPE    25
cpe:/o:cisco:ios:12.3ya
cpe:/o:cisco:ios:12.3yd
cpe:/o:cisco:ios:12.3yi
cpe:/o:cisco:ios:12.3yj
...

© SecPod Technologies