Description (CNA)
Memory leak in the Cisco Tunneling Control Protocol (cTCP) encapsulation feature in Cisco IOS 12.4, when an Easy VPN (aka EZVPN) server is enabled, allows remote attackers to cause a denial of service (memory consumption and device crash) via a sequence of TCP packets.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080a90469.shtml
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080a90459.shtml
- http://secunia.com/advisories/34438
- http://www.securityfocus.com/bid/34246
- https://exchange.xforce.ibmcloud.com/vulnerabilities/49417
- http://www.securitytracker.com/id?1021895
- http://www.vupen.com/english/advisories/2009/0851
ADP enrichment
No English description supplied.
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080a90469.shtml
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080a90459.shtml
- http://secunia.com/advisories/34438
- http://www.securityfocus.com/bid/34246
- https://exchange.xforce.ibmcloud.com/vulnerabilities/49417
- http://www.securitytracker.com/id?1021895
- http://www.vupen.com/english/advisories/2009/0851