Description
Cisco IOS 12.4 and earlier, when using the crypto packages and SSL support is enabled, allows remote attackers to cause a denial of service via a malformed (1) ClientHello, (2) ChangeCipherSpec, or (3) Finished message during an SSL session.
References
- cisco-ios-finished-dos(34442) vdb-entry
- 1018094 vdb-entry
- cisco-ios-changecipherspec-dos(34436) vdb-entry
- ADV-2007-1910 vdb-entry
- 25361 third-party-advisory
- oval:org.mitre.oval:def:5745 vdb-entry signature
- 24097 vdb-entry
- cisco-ios-clienthello-dos(34432) vdb-entry
- 35339 vdb-entry
- 20070522 Multiple Vulnerabilities in Cisco IOS While Processing SSL Packets vendor-advisory