PT-2006-5662 · Cisco · Cisco Ips+1

Published 2006-09-21 · Updated 2018-10-30 · CVE-2006-4910

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Cisco IDS versions prior to 4.1(5c) Cisco IPS versions prior to 5.0(6p1) and 5.1(2)

Description The issue affects the web administration interface, allowing remote attackers to cause a denial of service, resulting in an unresponsive device. This is achieved through a crafted SSLv2 Client Hello packet.

Recommendations For Cisco IDS versions prior to 4.1(5c), update to version 4.1(5c) or later. For Cisco IPS versions prior to 5.0(6p1), update to version 5.0(6p1) or later. For Cisco IPS versions prior to 5.1(2), update to version 5.1(2) or later.

Fix

Related Identifiers

CVE-2006-4910

Affected Products

Cisco Ids

Cisco Ips

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2006-4910 · Security Note
• http://cisco.com/warp/public/707/cisco-sa-20060920-ips.shtml · Vendor Advisory
• http://kb.cert.org/vuls/id/642076 · Note
• http://securitytracker.com/id?1016891 · Note
• http://vupen.com/english/advisories/2006/3721 · Note
• http://securityfocus.com/bid/20124 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/29056 · Note
• http://secunia.com/advisories/22046 · Note
• http://osvdb.org/29037 · Note