Vulnerability CVE-2004-0551
Published: 2004-08-06   Modified: 2012-02-12

Description:
Cisco CatOS 5.x before 5.5(20) through 8.x before 8.2(2) and 8.3(2)GLX, as used in Catalyst switches, allows remote attackers to cause a denial of service (system crash and reload) by sending invalid packets instead of the final ACK portion of the three-way handshake to the (1) Telnet, (2) HTTP, or (3) SSH services, aka "TCP-ACK DoS attack."

CVSS2 => (AV:N/AC:L/Au:N/C:N/I:N/A:P)

CVSS Base Score
Impact Subscore
Exploitability Subscore
5/10
2.9/10
10/10
Exploit range
Attack complexity
Authentication
Remote
Low
No required
Confidentiality impact
Integrity impact
Availability impact
None
None
Partial
Affected software
Cisco -> Catalyst 4506 
Cisco -> Catalyst 2901 
Cisco -> Catalyst 4507r 
Cisco -> Catalyst 2902 
Cisco -> Catalyst 4510r 
Cisco -> Catalyst 2926 
Cisco -> Catalyst 4912g 
Cisco -> Catalyst 2926f 
Cisco -> Catalyst 5000 
Cisco -> Catalyst 2926gl 
Cisco -> Catalyst 6000 ws-svc-nam-1 
Cisco -> Catalyst 2926gs 
Cisco -> Catalyst 6000 ws-svc-nam-2 
Cisco -> Catalyst 2926t 
Cisco -> Catalyst 6000 ws-x6380-nam 
Cisco -> Catalyst 2948 
Cisco -> Catos 
Cisco -> Catalyst 2948-ge-tx 
Cisco -> Catalyst 2948g-l3 
Cisco -> Catalyst 2980g 
Cisco -> Catalyst 2980g-a 
Cisco -> Catalyst 4000 
Cisco -> Catalyst 4500 
Cisco -> Catalyst 4503 

 References:
http://www.kb.cert.org/vuls/id/245190
http://xforce.iss.net/xforce/xfdb/16370
http://www.cisco.com/warp/public/707/cisco-sa-20040609-catos.shtml
Copyright 2024, cxsecurity.com

 

Back to Top