Cisco Content Service Switch HTTPS Post Denial Of Service Vulnerability

Bugtraq ID:	4747
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2002-0792
Remote:	Yes
Local:	No
Published:	May 15 2002 12:00AM
Updated:	Jul 11 2009 12:46PM
Credit:	Discovery of this issue is credited to James Mancini of Netreo Inc.
Vulnerable:	Cisco WebNS 5.1 0.0.10 + Cisco CSS11000 Content Services Switch + Cisco CSS11050 Content Services Switch + Cisco CSS11150 Content Services Switch + Cisco CSS11501 Content Services Switch + Cisco CSS11503 Content Services Switch + Cisco CSS11506 Content Services Switch + Cisco CSS11800 Content Services Switch Cisco WebNS 5.0 2.005s + Cisco CSS11000 Content Services Switch + Cisco CSS11050 Content Services Switch + Cisco CSS11150 Content Services Switch + Cisco CSS11501 Content Services Switch + Cisco CSS11503 Content Services Switch + Cisco CSS11506 Content Services Switch + Cisco CSS11800 Content Services Switch Cisco WebNS 5.0 1.012s + Cisco CSS11000 Content Services Switch + Cisco CSS11050 Content Services Switch + Cisco CSS11150 Content Services Switch + Cisco CSS11501 Content Services Switch + Cisco CSS11503 Content Services Switch + Cisco CSS11506 Content Services Switch + Cisco CSS11800 Content Services Switch Cisco WebNS 5.0 0.038s + Cisco CSS11000 Content Services Switch + Cisco CSS11050 Content Services Switch + Cisco CSS11150 Content Services Switch + Cisco CSS11501 Content Services Switch + Cisco CSS11503 Content Services Switch + Cisco CSS11506 Content Services Switch + Cisco CSS11800 Content Services Switch Cisco WebNS 4.0 1.053s + Cisco CSS11000 Content Services Switch + Cisco CSS11050 Content Services Switch + Cisco CSS11150 Content Services Switch + Cisco CSS11501 Content Services Switch + Cisco CSS11503 Content Services Switch + Cisco CSS11506 Content Services Switch + Cisco CSS11800 Content Services Switch
Not Vulnerable:

Cisco Content Service Switch HTTPS Post Denial Of Service Vulnerability

The Cisco Content Service (CSS) switch is a Layer 5 and 7 aware switch capable of providing a front-end to web server farms and caches. These switches run WebNS software.

It is possible to cause some Cisco Content Service Switches (CSS) to reboot by sending a HTTPS POST request to the web management interface of the device. The attacker does not need to be authenticated to cause this condition to occur.

The CSS 11000 series switches are known to be affected by this vulnerability.

Cisco Content Service Switch HTTPS Post Denial Of Service Vulnerability

There is no exploit code required.

Cisco Content Service Switch HTTPS Post Denial Of Service Vulnerability

Solution:
This issue affects devices running WebNS versions 4.01.053s and earlier, 5.00.038s and earlier, 5.01.012s and earlier, and versions 5.02.005s and earlier. Upgrades are pending for WebNS 5.10.0.01.

The following upgrades have been made available:


Cisco WebNS 4.0 1.053s

• Cisco WebNS 5.00.045
  This upgrade applies to WebNS versions 04.01.053s and earlier, and also 05.00.038s and earlier.
  

Cisco WebNS 5.0 1.012s

• Cisco WebNS 5.03
  This upgrade applies to WebNS versions 05.01.012s and earlier, and also 05.02.005s and earlier.
  

Cisco WebNS 5.0 0.038s

• Cisco WebNS 5.00.045
  This upgrade applies to WebNS versions 04.01.053s and earlier, and also 05.00.038s and earlier.
  

Cisco WebNS 5.0 2.005s

• Cisco WebNS 5.03
  This upgrade applies to WebNS versions 05.01.012s and earlier, and also 05.02.005s and earlier.
  

Cisco Content Service Switch HTTPS Post Denial Of Service Vulnerability

References:

• Cisco Call Manager Express (Cisco Systems)