PT-2004-2350 · Cisco · Cisco Ons 15454+2

Published 2004-12-31 · Updated 2018-10-30 · CVE-2004-1435

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions: Cisco ONS 15327 versions prior to 4.6(2) Cisco ONS 15454 versions prior to 4.6(2) Cisco ONS 15454 SDH versions prior to 4.6(2)

Description: The issue allows remote attackers to cause a denial of service, resulting in a control card reset. This can be achieved by establishing a large number of TCP connections with an invalid response instead of the final ACK (TCP-ACK).

Recommendations: For Cisco ONS 15327 versions prior to 4.6(2), update to version 4.6(2) or later to resolve the issue. For Cisco ONS 15454 versions prior to 4.6(2), update to version 4.6(2) or later to resolve the issue. For Cisco ONS 15454 SDH versions prior to 4.6(2), update to version 4.6(2) or later to resolve the issue.

Fix

Related Identifiers

CVE-2004-1435

Affected Products

Cisco Ons 15327

Cisco Ons 15454

Cisco Ons 15454 Sdh

References · 6

• http://cisco.com/warp/public/707/cisco-sa-20040721-ons.shtml · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2004-1435 · Security Note
• http://secunia.com/advisories/12117 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16763 · Note
• http://securityfocus.com/bid/10768 · Note
• http://kb.cert.org/vuls/id/277048 · Note