Cisco IPS/IDS Web Administration Interface Denial Of Service Vulnerability
BID:20124
CVE-2006-4910 |Info
Cisco IPS/IDS Web Administration Interface Denial Of Service Vulnerability
| Bugtraq ID: | 20124 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 20 2006 12:00AM |
| Updated: | Sep 21 2006 06:26PM |
| Credit: | The vendor disclosed this issue. |
| Vulnerable: |
Cisco Intrusion Prevention System 5.0 (3) Cisco Intrusion Prevention System 5.0 (2) Cisco Intrusion Prevention System 5.0 (1) Cisco Intrusion Prevention System 5.1(p1) Cisco Intrusion Prevention System 5.1(1e) Cisco Intrusion Prevention System 5.1(1d) Cisco Intrusion Prevention System 5.1(1c) Cisco Intrusion Prevention System 5.1(1b) Cisco Intrusion Prevention System 5.1(1b) Cisco Intrusion Prevention System 5.1(1) Cisco Intrusion Prevention System 5.1 (1a) Cisco Intrusion Prevention System 4.x Cisco Intrusion Detection System 4.1(5c) |
| Not Vulnerable: |
Cisco Intrusion Prevention System 5.1(2) Cisco Intrusion Prevention System 5.0(6p1) Cisco Intrusion Detection System 4.1(5c) |
Discussion
Cisco IPS/IDS Web Administration Interface Denial Of Service Vulnerability
The web administration interface of Cisco IPS/IDS is prone to a denial-of-service vulnerability.
An attacker can exploit this issue to cause the interface to become unresponsive, effectively denying administrative access to devices.
This issue is being tracked by Cisco bug IDs CSCsd91720 and CSCsd92033.
The web administration interface of Cisco IPS/IDS is prone to a denial-of-service vulnerability.
An attacker can exploit this issue to cause the interface to become unresponsive, effectively denying administrative access to devices.
This issue is being tracked by Cisco bug IDs CSCsd91720 and CSCsd92033.
Exploit / POC
Cisco IPS/IDS Web Administration Interface Denial Of Service Vulnerability
An attacker employs standard networking tools to exploit this issue.
An attacker employs standard networking tools to exploit this issue.
Solution / Fix
Cisco IPS/IDS Web Administration Interface Denial Of Service Vulnerability
Solution:
The vendor has released an update addressing this issue. Please see the referenced vendor advisory for details on obtaining the appropriate updates.
Solution:
The vendor has released an update addressing this issue. Please see the referenced vendor advisory for details on obtaining the appropriate updates.
References
Cisco IPS/IDS Web Administration Interface Denial Of Service Vulnerability
References:
References: