The HTTP server in Cisco IOS 12.0 through 12.1 allows local users to cause a denial of service (crash and reload) via a URL containing a ?/ string.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Ios | Cisco | 12.0t (including) | 12.0t (including) |
| Ios | Cisco | 12.0w5 (including) | 12.0w5 (including) |
| Ios | Cisco | 12.0xa (including) | 12.0xa (including) |
| Ios | Cisco | 12.0xe (including) | 12.0xe (including) |
| Ios | Cisco | 12.0xh (including) | 12.0xh (including) |
| Ios | Cisco | 12.0xj (including) | 12.0xj (including) |
| Ios | Cisco | 12.1aa (including) | 12.1aa (including) |
| Ios | Cisco | 12.1da (including) | 12.1da (including) |
| Ios | Cisco | 12.1db (including) | 12.1db (including) |
| Ios | Cisco | 12.1dc (including) | 12.1dc (including) |
| Ios | Cisco | 12.1ec (including) | 12.1ec (including) |
| Ios | Cisco | 12.1t (including) | 12.1t (including) |
| Ios | Cisco | 12.1xa (including) | 12.1xa (including) |
| Ios | Cisco | 12.1xb (including) | 12.1xb (including) |
| Ios | Cisco | 12.1xc (including) | 12.1xc (including) |
| Ios | Cisco | 12.1xd (including) | 12.1xd (including) |
| Ios | Cisco | 12.1xe (including) | 12.1xe (including) |
| Ios | Cisco | 12.1xf (including) | 12.1xf (including) |
| Ios | Cisco | 12.1xg (including) | 12.1xg (including) |
| Ios | Cisco | 12.1xh (including) | 12.1xh (including) |
| Ios | Cisco | 12.1xi (including) | 12.1xi (including) |
| Ios | Cisco | 12.1xj (including) | 12.1xj (including) |
| Ios | Cisco | 12.1xl (including) | 12.1xl (including) |
| Ios | Cisco | 12.1xp (including) | 12.1xp (including) |
References
- http://www.cisco.com/warp/public/707/ioshttpserverquery-pub.shtml
- http://www.securityfocus.com/bid/1838
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5412
- http://www.cisco.com/warp/public/707/ioshttpserverquery-pub.shtml
- http://www.securityfocus.com/bid/1838
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5412