Description
Secure Shell (SSH) 2 in Cisco IOS 12.0 through 12.3 allows remote attackers to cause a denial of service (device reload) (1) via a username that contains a domain name when using a TACACS+ server to authenticate, (2) when a new SSH session is in the login phase and a currently logged in user issues a send command, or (3) when IOS is logging messages and an SSH session is terminated while the server is sending data.
References
- 1013655 vdb-entry
- 13043 vdb-entry
- cisco-ios-sshv2-tacacs-authentication-dos(19987) vdb-entry
- cisco-ios-authentication-send-dos(19989) vdb-entry
- 14854 third-party-advisory
- cisco-ios-ssh-message-log-dos(19990) vdb-entry
- 20050406 Vulnerabilities in Cisco IOS Secure Shell Server vendor-advisory
- oval:org.mitre.oval:def:5455 vdb-entry signature