|
Cisco Service Control Engine SSH Server Denial of Service Vulnerabilities
|
|
Secunia Advisory:
|
SA30316
|
|
|
Release Date:
|
2008-05-22
|
|
Popularity:
|
2,440 views
|
|
|
Critical:
|
Moderately critical
|
|
Impact:
|
DoS
|
|
Where:
|
From remote
|
|
Solution Status:
|
Vendor Patch
|
|
| OS: | Cisco SCE 1000 Series (Service Control Engine)
Cisco SCE 2000 Series (Service Control Engine)
|
|
|
Secunia CVSS-2 Score:
|
Available in Secunia business solutions 
|
|
|
Subscribe:
|
Instant alerts on relevant vulnerabilities
|
|
| Advisory Content (Page 1 of 3) | [ 1 ] [ 2 ] [ 3 ] | |
|
Description:
Some vulnerabilities have been reported in Cisco Service Control Engine, which can be exploited by malicious people to cause a DoS (Denial of Service).
1) An unspecified error within the SCE SSH server can be exploited to cause system instability or a reload of the SCE via certain SSH login activity.
2) An unspecified error during the login process within the SCE SSH server can be exploited to cause a DoS via specific SSH credentials that attempt to change the authentication method.
Vulnerabilities #1 and #2 are reported in the SCE 1000 and 2000 series with software versions prior to 3.1.6.
3) An unspecified error within the SCE SSH server when processing SSH traffic to the SCE management interface can lead to an illegal IO operation and an imperative reboot of the SCE.
Vulnerability #3 is reported in the SCE 1000 and 2000 series with software versions prior to 3.0.7 and 3.1.0.
Successful exploitation of these vulnerabilities requires that the SSH server is enabled (not enabled by default).
Change Page:
[ 1 ] [ 2 ] [ 3 ]
|
|
|
Track this Secunia Advisory
|
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.
Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.
|
|
|
About this Secunia Advisory
|
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.
Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
|
