Cisco IOS 12.2 and 12.4, when NAT Skinny Call Control Protocol (SCCP) Fragmentation Support is enabled, allows remote attackers to cause a denial of service (device reload) via segmented SCCP messages, aka Cisco Bug ID CSCsi17020, a different vulnerability than CVE-2008-3810.
References
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 00:50
Type | Values Removed | Values Added |
---|---|---|
References | () http://secunia.com/advisories/31990 - | |
References | () http://www.cisco.com/en/US/products/products_security_advisory09186a0080a0148e.shtml - Patch | |
References | () http://www.securityfocus.com/bid/31359 - | |
References | () http://www.securitytracker.com/id?1020937 - | |
References | () http://www.vupen.com/english/advisories/2008/2670 - | |
References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/45535 - | |
References | () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5900 - |
Information
Published : 2008-09-26 16:21
Updated : 2024-11-21 00:50
NVD link : CVE-2008-3811
Mitre link : CVE-2008-3811
CVE.ORG link : CVE-2008-3811
JSON object : View
Products Affected
cisco
- ios
CWE
CWE-20
Improper Input Validation