Cisco IOS 2GB HTTP GET Buffer Overflow Vulnerability

Bugtraq ID:	8373
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Jul 31 2003 12:00AM
Updated:	Jul 31 2003 12:00AM
Credit:	Discovery is credited to FX <[email protected]>.
Vulnerable:	Cisco IOS 12.2 12.2XU Cisco IOS 12.0.19 Cisco IOS 12.0.7 (T) Cisco IOS 12.0.7 Cisco IOS 12.0.6 Cisco IOS 12.0.5 Cisco IOS 12.0.4 T Cisco IOS 12.0.4 S Cisco IOS 12.0.4 Cisco IOS 12.0.3 T2 Cisco IOS 12.0.3 Cisco IOS 12.0.2 XG Cisco IOS 12.0.2 XF Cisco IOS 12.0.2 XD Cisco IOS 12.0.2 XC Cisco IOS 12.0.2 Cisco IOS 12.0.1 XE Cisco IOS 12.0.1 XB Cisco IOS 12.0.1 XA3 Cisco IOS 12.0.1 W Cisco IOS 12.0.1 Cisco IOS 11.3.11 b Cisco IOS 11.3.1 T Cisco IOS 11.3.1 ED Cisco IOS 11.3.1 Cisco IOS 11.2.10 BC Cisco IOS 11.2.10 Cisco IOS 11.2.9 XA Cisco IOS 11.2.9 P Cisco IOS 11.2.8 SA5 Cisco IOS 11.2.8 SA3 Cisco IOS 11.2.8 SA1 Cisco IOS 11.2.8 P Cisco IOS 11.2.8 Cisco IOS 11.2.4 F1 Cisco IOS 11.2.4 F Cisco IOS 11.2.4 Cisco IOS 11.1.17 CT Cisco IOS 11.1.17 CC Cisco IOS 11.1.16 IA Cisco IOS 11.1.16 AA Cisco IOS 11.1.16 Cisco IOS 11.1.15 IA Cisco IOS 11.1.15 CA Cisco IOS 11.1.15 AA Cisco IOS 11.1.15 Cisco IOS 11.1.13 IA Cisco IOS 11.1.13 CA Cisco IOS 11.1.13 AA Cisco IOS 11.1.13 Cisco IOS 11.1.9 IA Cisco IOS 11.1.7 CA Cisco IOS 11.1.7 AA Cisco IOS 11.1.7 Cisco IOS 11.0.20 .3 Cisco IOS 11.0.17 BT Cisco IOS 11.0.17 Cisco IOS 11.0.12 (a)BT Cisco IOS 11.0.12 Cisco IOS 10.3.19 a Cisco IOS 10.3.16 Cisco IOS 10.3.4 .3 Cisco IOS 10.3.4 .2 Cisco IOS 10.3.3 .4 Cisco IOS 10.3.3 .3 Cisco IOS 12.2ZL Cisco IOS 12.2ZJ Cisco IOS 12.2ZH Cisco IOS 12.2ZG Cisco IOS 12.2ZF Cisco IOS 12.2ZE Cisco IOS 12.2ZD Cisco IOS 12.2ZC Cisco IOS 12.2ZB Cisco IOS 12.2ZA Cisco IOS 12.2YZ Cisco IOS 12.2YY Cisco IOS 12.2YX Cisco IOS 12.2YW Cisco IOS 12.2YV Cisco IOS 12.2YU Cisco IOS 12.2YT Cisco IOS 12.2YS Cisco IOS 12.2YS Cisco IOS 12.2YR Cisco IOS 12.2YQ Cisco IOS 12.2YP Cisco IOS 12.2YO Cisco IOS 12.2YN Cisco IOS 12.2YM Cisco IOS 12.2YL Cisco IOS 12.2YK Cisco IOS 12.2YJ Cisco IOS 12.2YH Cisco IOS 12.2YG Cisco IOS 12.2YF Cisco IOS 12.2YD Cisco IOS 12.2YC Cisco IOS 12.2YB Cisco IOS 12.2YA Cisco IOS 12.2XW Cisco IOS 12.2XU Cisco IOS 12.2XT Cisco IOS 12.2XS Cisco IOS 12.2XR Cisco IOS 12.2XQ Cisco IOS 12.2XQ Cisco IOS 12.2XN Cisco IOS 12.2XM Cisco IOS 12.2XL Cisco IOS 12.2XK Cisco IOS 12.2XK Cisco IOS 12.2XK Cisco IOS 12.2XJ Cisco IOS 12.2XJ Cisco IOS 12.2XI Cisco IOS 12.2XH Cisco IOS 12.2XG Cisco IOS 12.2XF Cisco IOS 12.2XE Cisco IOS 12.2XD Cisco IOS 12.2XC Cisco IOS 12.2XB Cisco IOS 12.2XA Cisco IOS 12.2T Cisco IOS 12.2SZ Cisco IOS 12.2SY Cisco IOS 12.2SX Cisco IOS 12.2S Cisco IOS 12.2PI Cisco IOS 12.2PB Cisco IOS 12.2MX Cisco IOS 12.2MC Cisco IOS 12.2MB Cisco IOS 12.2JA Cisco IOS 12.2DX Cisco IOS 12.2DD Cisco IOS 12.2DA Cisco IOS 12.2CY Cisco IOS 12.2CX Cisco IOS 12.2BZ Cisco IOS 12.2BY Cisco IOS 12.2BX Cisco IOS 12.2BW Cisco IOS 12.2BC Cisco IOS 12.2B Cisco IOS 12.2(9)S Cisco IOS 12.2(8)ZB7 Cisco IOS 12.2(8)YY3 Cisco IOS 12.2(8)YY Cisco IOS 12.2(8)YW2 Cisco IOS 12.2(8)YD Cisco IOS 12.2(8)T10 Cisco IOS 12.2(8)T Cisco IOS 12.2(8)JA Cisco IOS 12.2(8)BC1 Cisco IOS 12.2(7a) Cisco IOS 12.2(7.4)S Cisco IOS 12.2(7)DA Cisco IOS 12.2(7) Cisco IOS 12.2(6c) Cisco IOS 12.2(6.8)T1a Cisco IOS 12.2(6.8)T0a Cisco IOS 12.2(5d) Cisco IOS 12.2(5)CA1 Cisco IOS 12.2(5) Cisco IOS 12.2(4)YB Cisco IOS 12.2(4)YA1 Cisco IOS 12.2(4)YA Cisco IOS 12.2(4)XW1 Cisco IOS 12.2(4)XW Cisco IOS 12.2(4)XM2 Cisco IOS 12.2(4)XM Cisco IOS 12.2(4)XL4 Cisco IOS 12.2(4)XL Cisco IOS 12.2(4)T6 Cisco IOS 12.2(4)T3 Cisco IOS 12.2(4)T Cisco IOS 12.2(4)MX1 Cisco IOS 12.2(4)MX Cisco IOS 12.2(4)MB3 Cisco IOS 12.2(4)MB12 Cisco IOS 12.2(4)JA1 Cisco IOS 12.2(4)JA Cisco IOS 12.2(4)BX Cisco IOS 12.2(4)BC1a Cisco IOS 12.2(4)BC1 Cisco IOS 12.2(4)B4 Cisco IOS 12.2(4)B3 Cisco IOS 12.2(4)B2 Cisco IOS 12.2(4)B1 Cisco IOS 12.2(4)B Cisco IOS 12.2(4) Cisco IOS 12.2(3d) Cisco IOS 12.2(3.4)BP Cisco IOS 12.2(3) Cisco IOS 12.2(2.2)T Cisco IOS 12.2(2)YC Cisco IOS 12.2(2)YC Cisco IOS 12.2(2)XU2 Cisco IOS 12.2(2)XU Cisco IOS 12.2(2)XT3 Cisco IOS 12.2(2)XT Cisco IOS 12.2(2)XN Cisco IOS 12.2(2)XK2 Cisco IOS 12.2(2)XK Cisco IOS 12.2(2)XJ1 Cisco IOS 12.2(2)XJ Cisco IOS 12.2(2)XI2 Cisco IOS 12.2(2)XI1 Cisco IOS 12.2(2)XI Cisco IOS 12.2(2)XH3 Cisco IOS 12.2(2)XH2 Cisco IOS 12.2(2)XH Cisco IOS 12.2(2)XG Cisco IOS 12.2(2)XF Cisco IOS 12.2(2)XB4 Cisco IOS 12.2(2)XB3 Cisco IOS 12.2(2)XB11 Cisco IOS 12.2(2)XB Cisco IOS 12.2(2)XA5 Cisco IOS 12.2(2)XA1 Cisco IOS 12.2(2)XA Cisco IOS 12.2(2)T4 Cisco IOS 12.2(2)DD3 Cisco IOS 12.2(2)BY2 Cisco IOS 12.2(2)BY Cisco IOS 12.2(2)BX Cisco IOS 12.2(2)B Cisco IOS 12.2(1d) Cisco IOS 12.2(1b)DA1 Cisco IOS 12.2(1b) Cisco IOS 12.2(17) Cisco IOS 12.2(16.5)S Cisco IOS 12.2(16.1)B Cisco IOS 12.2(16)BX Cisco IOS 12.2(16)B1 Cisco IOS 12.2(16)B Cisco IOS 12.2(15.1)S Cisco IOS 12.2(15)ZN Cisco IOS 12.2(15)ZL Cisco IOS 12.2(15)ZJ1 Cisco IOS 12.2(15)YS/1.2(1) Cisco IOS 12.2(15)T5 Cisco IOS 12.2(15)BC1 Cisco IOS 12.2(14.5)T Cisco IOS 12.2(14.5) Cisco IOS 12.2(14)ZA2 Cisco IOS 12.2(14)SZ2 Cisco IOS 12.2(14)SZ1 Cisco IOS 12.2(14)SY1 Cisco IOS 12.2(14)SX1 Cisco IOS 12.2(13.03)B Cisco IOS 12.2(13)ZH Cisco IOS 12.2(13)ZC Cisco IOS 12.2(13)T1 Cisco IOS 12.2(13)MC1 Cisco IOS 12.2(12.05)T Cisco IOS 12.2(12.05)S Cisco IOS 12.2(12.05) Cisco IOS 12.2(12.02)T Cisco IOS 12.2(12.02)S Cisco IOS 12.2(12)DA3 Cisco IOS 12.2(11)YZ2 Cisco IOS 12.2(11)YX1 Cisco IOS 12.2(11)YP1 Cisco IOS 12.2(11)T9 Cisco IOS 12.2(11)T3 Cisco IOS 12.2(11)T Cisco IOS 12.2(11)JA1 Cisco IOS 12.2(11)JA Cisco IOS 12.2(11)BC3c Cisco IOS 12.2(10)DA2 Cisco IOS 12.2(1.4)S Cisco IOS 12.2(1.1)PI Cisco IOS 12.2(1.1) Cisco IOS 12.2(1)XS1 Cisco IOS 12.2(1)XS Cisco IOS 12.2(1)XQ Cisco IOS 12.2(1)XH Cisco IOS 12.2(1)XE3 Cisco IOS 12.2(1)XE2 Cisco IOS 12.2(1)XE Cisco IOS 12.2(1)XD4 Cisco IOS 12.2(1)XD3 Cisco IOS 12.2(1)XD1 Cisco IOS 12.2(1)XD1 Cisco IOS 12.2(1)XD Cisco IOS 12.2(1)XA Cisco IOS 12.2(1)DX Cisco IOS 12.2(1) Cisco IOS 12.2 Cisco IOS 12.1YJ Cisco IOS 12.1YI Cisco IOS 12.1YH Cisco IOS 12.1YF Cisco IOS 12.1YE Cisco IOS 12.1YD Cisco IOS 12.1YC Cisco IOS 12.1YB Cisco IOS 12.1YA Cisco IOS 12.1XZ Cisco IOS 12.1XY Cisco IOS 12.1XX Cisco IOS 12.1XW Cisco IOS 12.1XV Cisco IOS 12.1XU Cisco IOS 12.1XT Cisco IOS 12.1XS Cisco IOS 12.1XR Cisco IOS 12.1XQ Cisco IOS 12.1XP Cisco IOS 12.1XM Cisco IOS 12.1XL Cisco IOS 12.1XK Cisco IOS 12.1XJ Cisco IOS 12.1XI Cisco IOS 12.1XH Cisco IOS 12.1XG Cisco IOS 12.1XF Cisco IOS 12.1XE Cisco IOS 12.1XD Cisco IOS 12.1XC Cisco IOS 12.1XB Cisco IOS 12.1XA Cisco IOS 12.1T Cisco IOS 12.1M Cisco IOS 12.1EZ Cisco IOS 12.1EY Cisco IOS 12.1EX Cisco IOS 12.1EW Cisco IOS 12.1EV Cisco IOS 12.1EC Cisco IOS 12.1EB Cisco IOS 12.1EA Cisco IOS 12.1E Cisco IOS 12.1DC Cisco IOS 12.1DB Cisco IOS 12.1DA Cisco IOS 12.1CX Cisco IOS 12.1AY Cisco IOS 12.1AX Cisco IOS 12.1AA Cisco IOS 12.10S Cisco IOS 12.1(9a) Cisco IOS 12.1(9)EX3 Cisco IOS 12.1(9)EX Cisco IOS 12.1(9)E3 Cisco IOS 12.1(9)E Cisco IOS 12.1(9)AA Cisco IOS 12.1(9) Cisco IOS 12.1(8c) Cisco IOS 12.1(8b)EX4 Cisco IOS 12.1(8b)E9 Cisco IOS 12.1(8b)E8 Cisco IOS 12.1(8b)E14 Cisco IOS 12.1(8a)EX Cisco IOS 12.1(8a)EW1 Cisco IOS 12.1(8a)EW Cisco IOS 12.1(8a)E Cisco IOS 12.1(8)EA2b Cisco IOS 12.1(8)EA1b Cisco IOS 12.1(8)E Cisco IOS 12.1(8)AA1 Cisco IOS 12.1(8) Cisco IOS 12.1(7b) Cisco IOS 12.1(7a)EY3 Cisco IOS 12.1(7a)EY Cisco IOS 12.1(7a)E6 Cisco IOS 12.1(7)EC Cisco IOS 12.1(7)DA3 Cisco IOS 12.1(7)DA2 Cisco IOS 12.1(7)CX Cisco IOS 12.1(7) Cisco IOS 12.1(6a) Cisco IOS 12.1(6.5)EC3 Cisco IOS 12.1(6)EZ2 Cisco IOS 12.1(6)EZ1 Cisco IOS 12.1(6)EY Cisco IOS 12.1(6)EA2c Cisco IOS 12.1(6)EA2b Cisco IOS 12.1(6)EA2a Cisco IOS 12.1(6)EA2 Cisco IOS 12.1(6)EA1a Cisco IOS 12.1(6)EA1 Cisco IOS 12.1(6)E8 Cisco IOS 12.1(6)E12 Cisco IOS 12.1(5e) Cisco IOS 12.1(5c)EX Cisco IOS 12.1(5c)E12 Cisco IOS 12.1(5)YI1 Cisco IOS 12.1(5)YI Cisco IOS 12.1(5)YH3 Cisco IOS 12.1(5)YH Cisco IOS 12.1(5)YF4 Cisco IOS 12.1(5)YF2 Cisco IOS 12.1(5)YF Cisco IOS 12.1(5)YD6 Cisco IOS 12.1(5)YD2 Cisco IOS 12.1(5)YD Cisco IOS 12.1(5)YC2 Cisco IOS 12.1(5)YC1 Cisco IOS 12.1(5)YC Cisco IOS 12.1(5)YB5 Cisco IOS 12.1(5)YB4 Cisco IOS 12.1(5)YB Cisco IOS 12.1(5)YA2 Cisco IOS 12.1(5)YA Cisco IOS 12.1(5)XY6 Cisco IOS 12.1(5)XV5 Cisco IOS 12.1(5)XV4 Cisco IOS 12.1(5)XV3 Cisco IOS 12.1(5)XV Cisco IOS 12.1(5)XU1 Cisco IOS 12.1(5)XS2 Cisco IOS 12.1(5)XS Cisco IOS 12.1(5)XR2 Cisco IOS 12.1(5)XM7 Cisco IOS 12.1(5)XM4 Cisco IOS 12.1(5)XM Cisco IOS 12.1(5)XG5 Cisco IOS 12.1(5)T9 Cisco IOS 12.1(5)T15 Cisco IOS 12.1(5)T12 Cisco IOS 12.1(5)T Cisco IOS 12.1(5)EY Cisco IOS 12.1(5)DC2 Cisco IOS 12.1(5)DC Cisco IOS 12.1(5)DB1 Cisco IOS 12.1(5)DA1 Cisco IOS 12.1(4a) Cisco IOS 12.1(4.3)T Cisco IOS 12.1(4)XZ7 Cisco IOS 12.1(4)XZ Cisco IOS 12.1(4)XM4 Cisco IOS 12.1(4)EA1e Cisco IOS 12.1(4)E3 Cisco IOS 12.1(4)DC2 Cisco IOS 12.1(4)DC Cisco IOS 12.1(4)DB2 Cisco IOS 12.1(4)DB1 Cisco IOS 12.1(4)DB Cisco IOS 12.1(4) Cisco IOS 12.1(3b) Cisco IOS 12.1(3a)XI8 Cisco IOS 12.1(3a)E8 Cisco IOS 12.1(3a)E7 Cisco IOS 12.1(3)XT3 Cisco IOS 12.1(3)XT Cisco IOS 12.1(3)XQ Cisco IOS 12.1(3)XP4 Cisco IOS 12.1(3)XP Cisco IOS 12.1(3)XI Cisco IOS 12.1(3)DC2 Cisco IOS 12.1(3)DB1 Cisco IOS 12.1(2b) Cisco IOS 12.1(20) Cisco IOS 12.1(2)XF5 Cisco IOS 12.1(2)XF4 Cisco IOS 12.1(2)XF Cisco IOS 12.1(2)E1 Cisco IOS 12.1(1c) Cisco IOS 12.1(1a)T1 Cisco IOS 12.1(19)EW Cisco IOS 12.1(19)EC Cisco IOS 12.1(19)E Cisco IOS 12.1(18.4) Cisco IOS 12.1(15)BC1 Cisco IOS 12.1(14)EB Cisco IOS 12.1(14)EA1 Cisco IOS 12.1(14)E4 Cisco IOS 12.1(13.4)E Cisco IOS 12.1(13)EX2 Cisco IOS 12.1(13)EW Cisco IOS 12.1(13)EA1c Cisco IOS 12.1(13)E7 Cisco IOS 12.1(13)AY Cisco IOS 12.1(13) Cisco IOS 12.1(12c)EV01 Cisco IOS 12.1(12c)EC Cisco IOS 12.1(12c)E7 Cisco IOS 12.1(12b) Cisco IOS 12.1(12)E Cisco IOS 12.1(11b)E12 Cisco IOS 12.1(11b)E Cisco IOS 12.1(11b) Cisco IOS 12.1(11)EC Cisco IOS 12.1(11)EA1 Cisco IOS 12.1(11)E Cisco IOS 12.1(11) Cisco IOS 12.1(10a) Cisco IOS 12.1(10)EY Cisco IOS 12.1(10)EX Cisco IOS 12.1(10)EC1 Cisco IOS 12.1(10)E4 Cisco IOS 12.1(10)E Cisco IOS 12.1(10)AA Cisco IOS 12.1(1.3)T Cisco IOS 12.1(1)T Cisco IOS 12.1(1)EX Cisco IOS 12.1(1)E5 Cisco IOS 12.1(1)DC2 Cisco IOS 12.1(1)DC Cisco IOS 12.1(1)DB2 Cisco IOS 12.1(1)DB Cisco IOS 12.1(1) Cisco IOS 12.1 Cisco IOS 12.0XW Cisco IOS 12.0XV Cisco IOS 12.0XU Cisco IOS 12.0XS Cisco IOS 12.0XR Cisco IOS 12.0XQ Cisco IOS 12.0XP Cisco IOS 12.0XN Cisco IOS 12.0XM Cisco IOS 12.0XL Cisco IOS 12.0XK Cisco IOS 12.0XJ Cisco IOS 12.0XI Cisco IOS 12.0XH Cisco IOS 12.0XG Cisco IOS 12.0XF Cisco IOS 12.0XE Cisco IOS 12.0XD Cisco IOS 12.0XC Cisco IOS 12.0XB Cisco IOS 12.0XA Cisco IOS 12.0WX Cisco IOS 12.0WT Cisco IOS 12.0WC Cisco IOS 12.0W5 Cisco IOS 12.0T Cisco IOS 12.0SZ Cisco IOS 12.0SY Cisco IOS 12.0SX Cisco IOS 12.0ST Cisco IOS 12.0SP Cisco IOS 12.0SL Cisco IOS 12.0SC Cisco IOS 12.0S Cisco IOS 12.0EV Cisco IOS 12.0DC Cisco IOS 12.0DB Cisco IOS 12.0DA Cisco IOS 12.0(9a) Cisco IOS 12.0(9)S8 Cisco IOS 12.0(9)S Cisco IOS 12.0(9) Cisco IOS 12.0(8a) Cisco IOS 12.0(8.3)SC Cisco IOS 12.0(8.0.2)S Cisco IOS 12.0(8)S1 Cisco IOS 12.0(8) Cisco IOS 12.0(7a) Cisco IOS 12.0(7.4)S Cisco IOS 12.0(7)XV Cisco IOS 12.0(7)XK3 Cisco IOS 12.0(7)XK Cisco IOS 12.0(7)XF1 Cisco IOS 12.0(7)XF Cisco IOS 12.0(7)XE2 Cisco IOS 12.0(7)XE Cisco IOS 12.0(7)WX5(15a) Cisco IOS 12.0(7)T3 Cisco IOS 12.0(7)T2 Cisco IOS 12.0(7)T Cisco IOS 12.0(7)SC Cisco IOS 12.0(7)S1 Cisco IOS 12.0(7)DC1 Cisco IOS 12.0(7)DB2 Cisco IOS 12.0(6b) Cisco IOS 12.0(5.4)WC1 Cisco IOS 12.0(5.3)WC1 Cisco IOS 12.0(5.2)XU Cisco IOS 12.0(5.1)XP Cisco IOS 12.0(5)YB4 Cisco IOS 12.0(5)XU Cisco IOS 12.0(5)XS Cisco IOS 12.0(5)XN1 Cisco IOS 12.0(5)XN Cisco IOS 12.0(5)XK2 Cisco IOS 12.0(5)XK Cisco IOS 12.0(5)XE Cisco IOS 12.0(5)WX Cisco IOS 12.0(5)WC3b Cisco IOS 12.0(5)WC3 Cisco IOS 12.0(5)WC2b Cisco IOS 12.0(5)WC2 Cisco IOS 12.0(5)WC 2900XL-LRE Cisco IOS 12.0(5)T1 Cisco IOS 12.0(5)T Cisco IOS 12.0(4)XM1 Cisco IOS 12.0(4)XM Cisco IOS 12.0(4)XE1 Cisco IOS 12.0(4)XE Cisco IOS 12.0(3d) Cisco IOS 12.0(3.6)W5(9.0.5) Cisco IOS 12.0(3.4)T Cisco IOS 12.0(3.3)S Cisco IOS 12.0(3.2) Cisco IOS 12.0(3)XE Cisco IOS 12.0(3) Cisco IOS 12.0(2b) Cisco IOS 12.0(26)W5(28a) Cisco IOS 12.0(26)W5(28) Cisco IOS 12.0(26) Cisco IOS 12.0(25)W5(27) Cisco IOS 12.0(25)S1 Cisco IOS 12.0(24.2)S Cisco IOS 12.0(24)S2 Cisco IOS 12.0(24)S1 Cisco IOS 12.0(23)S3 Cisco IOS 12.0(22)S5 Cisco IOS 12.0(21a) Cisco IOS 12.0(21)SX Cisco IOS 12.0(21)ST7 Cisco IOS 12.0(21)ST Cisco IOS 12.0(21)S7 Cisco IOS 12.0(21)S5a Cisco IOS 12.0(21)S4a Cisco IOS 12.0(21)S3 Cisco IOS 12.0(21)S1 Cisco IOS 12.0(21)S Cisco IOS 12.0(20a) Cisco IOS 12.0(20.4)SP Cisco IOS 12.0(20)W5(22b) Cisco IOS 12.0(20)SX Cisco IOS 12.0(20)ST6 Cisco IOS 12.0(20)ST2 Cisco IOS 12.0(20)SP1 Cisco IOS 12.0(2)XE Cisco IOS 12.0(19a) Cisco IOS 12.0(19)ST6 Cisco IOS 12.0(19)ST2 Cisco IOS 12.0(19)ST Cisco IOS 12.0(19)SL4 Cisco IOS 12.0(19)S4 Cisco IOS 12.0(19)S2a Cisco IOS 12.0(19)S2 Cisco IOS 12.0(19)S Cisco IOS 12.0(18b) Cisco IOS 12.0(18)W5(22b) Cisco IOS 12.0(18)ST1 Cisco IOS 12.0(18)S7 Cisco IOS 12.0(18)S5a Cisco IOS 12.0(18)S5 Cisco IOS 12.0(18)S Cisco IOS 12.0(17a) Cisco IOS 12.0(17)ST8 Cisco IOS 12.0(17)ST5 Cisco IOS 12.0(17)ST1 Cisco IOS 12.0(17)SL9 Cisco IOS 12.0(17)SL6 Cisco IOS 12.0(17)SL2 Cisco IOS 12.0(17)S7 Cisco IOS 12.0(17)S4 Cisco IOS 12.0(17)S Cisco IOS 12.0(17) Cisco IOS 12.0(16a) Cisco IOS 12.0(16.06)S Cisco IOS 12.0(16)W5(21) Cisco IOS 12.0(16)ST1 Cisco IOS 12.0(16)SC3 Cisco IOS 12.0(16)S8a Cisco IOS 12.0(16)S8 Cisco IOS 12.0(16)S10 Cisco IOS 12.0(15a) Cisco IOS 12.0(15)S7 Cisco IOS 12.0(15)S6 Cisco IOS 12.0(15)S3 Cisco IOS 12.0(14a) Cisco IOS 12.0(14)W5(20) Cisco IOS 12.0(14)ST3 Cisco IOS 12.0(14)ST Cisco IOS 12.0(14)S8 Cisco IOS 12.0(14)S7 Cisco IOS 12.0(13a) Cisco IOS 12.0(13)WT6(1) Cisco IOS 12.0(13)W5(19c) Cisco IOS 12.0(13)S8 Cisco IOS 12.0(13)S6 Cisco IOS 12.0(12a) Cisco IOS 12.0(12)S4 Cisco IOS 12.0(12)S3 Cisco IOS 12.0(11a) Cisco IOS 12.0(11)ST4 Cisco IOS 12.0(11)S6 Cisco IOS 12.0(10a) Cisco IOS 12.0(10)W5(18g) Cisco IOS 12.0(10)W5(18f) Cisco IOS 12.0(10)W5 Cisco IOS 12.0(10)S8 Cisco IOS 12.0(10)S7 Cisco IOS 12.0(10)S3b Cisco IOS 12.0(1)ST Cisco IOS 12.0(1)S Cisco IOS 12.0(05)WC9 Cisco IOS 12.0 Cisco IOS 11.3XA Cisco IOS 11.3WA4 Cisco IOS 11.3T Cisco IOS 11.3NA Cisco IOS 11.3MA Cisco IOS 11.3HA Cisco IOS 11.3DB Cisco IOS 11.3DA Cisco IOS 11.3AA Cisco IOS 11.3(8)DB2 Cisco IOS 11.3(7)DB1 Cisco IOS 11.3(2)XA Cisco IOS 11.3(11d) Cisco IOS 11.3(11c) Cisco IOS 11.3(11b)T2 Cisco IOS 11.3(11b) Cisco IOS 11.3 Cisco IOS 11.2XA Cisco IOS 11.2WA4 Cisco IOS 11.2WA3 Cisco IOS 11.2SA Cisco IOS 11.2P Cisco IOS 11.2GS Cisco IOS 11.2F Cisco IOS 11.2BC Cisco IOS 11.2(9)XA Cisco IOS 11.2(8.9)SA6 Cisco IOS 11.2(4)XAf Cisco IOS 11.2(4)XA Cisco IOS 11.2(4) Cisco IOS 11.2(26e) Cisco IOS 11.2(26b) Cisco IOS 11.2(26a) Cisco IOS 11.2(26)P5 Cisco IOS 11.2(26)P2 Cisco IOS 11.2(23a)BC1 Cisco IOS 11.2(19a)GS6 Cisco IOS 11.2(19)GS0.2 Cisco IOS 11.2(17) Cisco IOS 11.2(15b) Cisco IOS 11.2(11b)T2 Cisco IOS 11.2 Cisco IOS 11.1IA Cisco IOS 11.1CT Cisco IOS 11.1CC Cisco IOS 11.1CA Cisco IOS 11.1AA Cisco IOS 11.1(36)CC4 Cisco IOS 11.1(36)CC2 Cisco IOS 11.1(36)CA4 Cisco IOS 11.1(36)CA2 Cisco IOS 11.1(28a)IA Cisco IOS 11.1(28a)CT Cisco IOS 11.1(24c) Cisco IOS 11.1(24b) Cisco IOS 11.1(24a) Cisco IOS 11.1(20)AA4 Cisco IOS 11.1 Cisco IOS 11.0x Cisco IOS 11.0(22b) Cisco IOS 11.0(22a) Cisco IOS 11.0(18) Cisco IOS 11.0 Cisco IOS 10.3
Not Vulnerable:	Cisco IOS 12.3T Cisco IOS 12.3(1a) Cisco IOS 12.3 Cisco IOS 12.2(18.2) Cisco IOS 12.2(15)T Cisco IOS 12.2(11)JA1 Cisco IOS 12.0(25.4)S1

Cisco IOS 2GB HTTP GET Buffer Overflow Vulnerability

The HTTP server on Cisco IOS devices is prone to a buffer overrun that can be triggered by sending 2GB of data. This may be exploited to execute arbitrary code on a vulnerable device.

Cisco IOS 2GB HTTP GET Buffer Overflow Vulnerability

An exploit was released by FX <[email protected]>. This exploit depends on another vulnerability (BID 8323).

• /data/vulnerabilities/exploits/CiscoCasumEst.tgz

Cisco IOS 2GB HTTP GET Buffer Overflow Vulnerability

Solution:
Cisco has released fixes for this issue. Some fixes are still pending release. Please see the attached Cisco "Sending 2GB Data in GET Request Causes Buffer Overflow in Cisco IOS Software" document for further information.

Administrators are strongly advised to use any available workarounds until it is possible to apply fixes for affected versions of IOS. Since some fixes are still pending release, arrangements should be made for workarounds to be deployed until the vendor does release fixes for all affected versions.

Cisco IOS 2GB HTTP GET Buffer Overflow Vulnerability

References:

• Sending 2GB Data in GET Request Causes Buffer Overflow in Cisco IOS Software (Cisco)
  
• Cisco IOS HTTP remote exploit (FX )