Secunia

Qualys Security Research Team has reported two vulnerabilities in Cisco CNS Network Registrar, which can be exploited by malicious people to cause a DoS (Denial of Service).

1) An unspecified error within the Cisco CNS Network Registrar CCM (Central Configuration Management) server can be exploited to consume a large amount of CPU resources. This can be exploited by ending a connection after sending a specially crafted sequence of packets.

This vulnerability affects versions 6.0 through 6.1.1.3.

2) An unspecified error within the Cisco CNS Network Registrar lock manager process can be exploited to crash it along with the CCM server by sending a specially crafted sequence of packets.

This vulnerability affects version 6.1.1.3 and all prior versions.

NOTE: The vulnerabilities only affect Cisco CNS Network Registrar for Windows NT server and Windows 2000.

Solution
Update to the 6.1.1.4 patch release.
Further details available in Customer Area

Provided and/or discovered by
Qualys Security Research Team

Changelog
Further details available in Customer Area

Original Advisory
Cisco:
http://www.cisco.com/warp/public/707/cisco-sa-20041202-cnr.shtml

Deep Links
Links available in Customer Area