Cisco CDS Internet Streamer Web Server Remote Denial of Service Vulnerability

Bugtraq ID:	47979
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2011-1649
Remote:	Yes
Local:	No
Published:	May 25 2011 12:00AM
Updated:	May 25 2011 12:00AM
Credit:	Cisco
Vulnerable:	Cisco Content Delivery System 2.5.9 Cisco Content Delivery System 2.5.7
Not Vulnerable:	Cisco Content Delivery System 2.5.9 build 126

Cisco CDS Internet Streamer Web Server Remote Denial of Service Vulnerability

The Cisco CDS Internet Streamer webserver component is prone to a remote denial-of-service vulnerability.

An attacker can exploit this issue to crash the webserver, causing denial-of-service conditions.

This issue is fixed in Cisco Content Delivery 2.5.9 build 126. Versions prior to 2.5.7 are not affected.

This issue being tracked by Cisco bug IDs CSCtg67333 and CSCth25341.

Cisco CDS Internet Streamer Web Server Remote Denial of Service Vulnerability

Attackers can use readily available tools to exploit this issue.

Cisco CDS Internet Streamer Web Server Remote Denial of Service Vulnerability

Solution:
Updates are available. Please see the references for more information.

Cisco CDS Internet Streamer Web Server Remote Denial of Service Vulnerability

References:

• Cisco Homepage (Cisco )
  
• Cisco Security Advisory: Cisco Content Delivery System Internet Streamer: Web Se (Cisco)
  
• Cisco Security Advisory: Cisco Content Delivery System Internet Streamer: Web Se (Cisco)