PT-2007-2359 · Cisco · Cisco Ios

Publicado 2007-02-14 · Atualizado 2022-06-02 · CVE-2007-0918

Positive Technologies (AI Summary)

CVSS v2.0

7.1

Alta

Vetor base

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions: Cisco IOS versions 12.3T, 12.3YA, 12.4XA

Description: The issue allows remote attackers to cause a denial of service, resulting in the crash of the Intrusion Prevention System (IPS) and potential traffic loss. This is achieved through unspecified manipulations that are not properly handled by the regular expression feature in the ATOMIC.TCP signature engine.

Recommendations: For Cisco IOS versions 12.3T, 12.3YA, 12.4XA, consider disabling the ATOMIC.TCP signature engine in the IPS feature as a temporary workaround to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2007-0918

Produtos afetados

Cisco Ios

Referências · 10

• https://exchange.xforce.ibmcloud.com/vulnerabilities/32474 · Nota
• http://secunia.com/advisories/24142 · Nota
• http://cisco.com/en/US/products/products_security_advisory09186a00807e0a5b.shtml · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2007-0918 · Nota de Segurança
• http://vupen.com/english/advisories/2007/0597 · Nota
• http://securityfocus.com/bid/22549 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5832 · Nota
• http://cisco.com/en/US/products/products_security_response09186a00807e0a5e.html · Aviso do Fabricante
• http://securitytracker.com/id?1017631 · Nota
• http://osvdb.org/33053 · Nota