Cisco Wireless LAN Controller HTTP Packet Denial of Service Vulnerability

Bugtraq ID:	43065
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2010-2841
Remote:	Yes
Local:	No
Published:	Sep 08 2010 12:00AM
Updated:	Sep 08 2010 12:00AM
Credit:	Cisco
Vulnerable:	Cisco Wireless LAN Control 6.0 Cisco Wireless LAN Control 5.2 Cisco Wireless LAN Control 5.1 Cisco Wireless LAN Control 5.0 Cisco Wireless LAN Control 4.2 M Cisco Wireless LAN Control 4.2
Not Vulnerable:	Cisco Wireless LAN Control 6.0.196.0 Cisco Wireless LAN Control 5.2.193.11 Cisco Wireless LAN Control 4.2.209.0 Cisco Wireless LAN Control 4.2.207.54M

Cisco Wireless LAN Controller HTTP Packet Denial of Service Vulnerability

Cisco Wireless LAN Controller is prone to a denial-of-service vulnerability.

An authenticated attacker can exploit this issue to cause an affected device to reload, denying service to legitimate users.

This issue is documented by Cisco Bug ID CSCtd16938.

Cisco Wireless LAN Controller HTTP Packet Denial of Service Vulnerability

Attackers can use readily available network utilities or a browser to exploit this issue.

Cisco Wireless LAN Controller HTTP Packet Denial of Service Vulnerability

Solution:
Vendor updates are available. Please see the referenced advisory for details.

Cisco Wireless LAN Controller HTTP Packet Denial of Service Vulnerability

References:

• Cisco Homepage (Cisco )
  
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco Wireless LAN Controll (Cisco)