Cisco VPN 3000 Concentrator Malformed HTTP/TCP Packet Remote Denial of Service Vulnerability
BID:16394
Info
Cisco VPN 3000 Concentrator Malformed HTTP/TCP Packet Remote Denial of Service Vulnerability
| Bugtraq ID: | 16394 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 26 2006 12:00AM |
| Updated: | Apr 26 2006 10:41PM |
| Credit: | Discovered by Eldon Sprickerhoff <[email protected]>. |
| Vulnerable: |
Cisco VPN 3080 Concentrator 4.7.2 A Cisco VPN 3080 Concentrator 4.7.1 F Cisco VPN 3080 Concentrator 4.7.1 Cisco VPN 3080 Concentrator 4.7 Cisco VPN 3080 Concentrator 4.7 REL Cisco VPN 3060 Concentrator 4.7.2 A Cisco VPN 3060 Concentrator 4.7.2 Cisco VPN 3060 Concentrator 4.7.1 F Cisco VPN 3060 Concentrator 4.7.1 Cisco VPN 3060 Concentrator 4.7 Cisco VPN 3060 Concentrator 4.7 REL Cisco VPN 3030 Concentrator 4.7.2 A Cisco VPN 3030 Concentrator 4.7.2 Cisco VPN 3030 Concentrator 4.7.1 F Cisco VPN 3030 Concentrator 4.7.1 Cisco VPN 3030 Concentrator 4.7 Cisco VPN 3030 Concentrator 4.7 REL Cisco VPN 3020 Concentrator 4.7.2 A Cisco VPN 3020 Concentrator 4.7.2 Cisco VPN 3020 Concentrator 4.7.1 F Cisco VPN 3020 Concentrator 4.7.1 Cisco VPN 3020 Concentrator 4.7 Cisco VPN 3020 Concentrator 4.7 REL Cisco VPN 3015 Concentrator 4.7.2 A Cisco VPN 3015 Concentrator 4.7.2 Cisco VPN 3015 Concentrator 4.7.1 F Cisco VPN 3015 Concentrator 4.7.1 Cisco VPN 3015 Concentrator 4.7 Cisco VPN 3015 Concentrator 4.7 REL Cisco VPN 3005 Concentrator 4.7.2 A Cisco VPN 3005 Concentrator 4.7.2 Cisco VPN 3005 Concentrator 4.7.1 F Cisco VPN 3005 Concentrator 4.7.1 Cisco VPN 3005 Concentrator 4.7 Cisco VPN 3005 Concentrator 4.7 REL |
| Not Vulnerable: |
Cisco VPN 3080 Concentrator 4.7.2 F Cisco VPN 3080 Concentrator 4.1.7 L Cisco VPN 3030 Concentrator 4.7.2 F Cisco VPN 3030 Concentrator 4.1.7 L Cisco VPN 3020 Concentrator 4.7.2 F Cisco VPN 3020 Concentrator 4.1.7 L Cisco VPN 3015 Concentrator 4.7.2 F Cisco VPN 3015 Concentrator 4.1.7 L Cisco VPN 3005 Concentrator 4.7.2 F Cisco VPN 3005 Concentrator 4.1.7 L |
Discussion
Cisco VPN 3000 Concentrator Malformed HTTP/TCP Packet Remote Denial of Service Vulnerability
Cisco VPN 3000 Concentrator is prone to a remote denial-of-service vulnerability when handling specially crafted HTTP or TCP packets.
A successful attack can cause the device to hang, completely denying further service to legitimate users.
Cisco has documented this issue as Bug IDs CSCsb77324 and CSCsd26340.
Cisco VPN 3000 Concentrator is prone to a remote denial-of-service vulnerability when handling specially crafted HTTP or TCP packets.
A successful attack can cause the device to hang, completely denying further service to legitimate users.
Cisco has documented this issue as Bug IDs CSCsb77324 and CSCsd26340.
Exploit / POC
Cisco VPN 3000 Concentrator Malformed HTTP/TCP Packet Remote Denial of Service Vulnerability
The researcher responsible for discovering this issue has reported that they have developed a functional exploit for this issue. This exploit has not been released to the public.
The researcher responsible for discovering this issue has reported that they have developed a functional exploit for this issue. This exploit has not been released to the public.
Solution / Fix
Cisco VPN 3000 Concentrator Malformed HTTP/TCP Packet Remote Denial of Service Vulnerability
Solution:
Cisco has released advisory cisco-sa-20060126-vpn to address this issue. Please see the referenced advisory for more information.
Solution:
Cisco has released advisory cisco-sa-20060126-vpn to address this issue. Please see the referenced advisory for more information.
References
Cisco VPN 3000 Concentrator Malformed HTTP/TCP Packet Remote Denial of Service Vulnerability
References:
References: