Cisco IOS SSL VPN HTTP Redirect Memory Leak Remote Denial of Service Vulnerability

Bugtraq ID:	43390
Class:	Unknown
CVE:	CVE-2010-2836
Remote:	Yes
Local:	No
Published:	Sep 22 2010 12:00AM
Updated:	Sep 22 2010 12:00AM
Credit:	Cisco
Vulnerable:	Cisco IOS 15.1T Cisco IOS 15.0M Cisco IOS 15.0M Cisco IOS 12.4T
Not Vulnerable:	Cisco IOS 15.1(2)T0a Cisco IOS 15.1(1)T1 Cisco IOS 15.0(1)M3 Cisco IOS 12.4(24)T4 Cisco IOS 12.4(20)T6 Cisco IOS 12.4(15)T14

Cisco IOS SSL VPN HTTP Redirect Memory Leak Remote Denial of Service Vulnerability

Cisco IOS is prone to a remote denial-of-service vulnerability.

An attacker can exploit this issue to cause an affected device to reload or to stop accepting new TCP connections, denying service to legitimate users.

This issue is tracked by Cisco Bug ID CSCtg21685.

Cisco IOS SSL VPN HTTP Redirect Memory Leak Remote Denial of Service Vulnerability

To exploit this issue, attackers can use readily available network utilities.

Cisco IOS SSL VPN HTTP Redirect Memory Leak Remote Denial of Service Vulnerability

Solution:
Updates are available. Please see the references for details.

Cisco IOS SSL VPN HTTP Redirect Memory Leak Remote Denial of Service Vulnerability

References:

• Cisco Homepage (Cisco )
  
• Cisco Security Advisory: Cisco IOS SSL VPN Vulnerability (Cisco Systems Product Security Incident Response Team )
  
• Cisco Security Advisory: Cisco IOS SSL VPN Vulnerability (Cisco)