Description
Memory leak in the SSLVPN feature in Cisco IOS 12.3 through 12.4 allows remote attackers to cause a denial of service (memory consumption and device crash) by disconnecting an SSL session in an abnormal manner, leading to a Transmission Control Block (TCB) leak.
References
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080a90469.shtml
- oval:org.mitre.oval:def:12092 vdb-entry signature
- 34239 vdb-entry
- 34438 third-party-advisory
- 1021896 vdb-entry
- ios-sslvpn-tcbleak-dos(49427) vdb-entry
- 20090325 Cisco IOS Software WebVPN and SSLVPN Vulnerabilities vendor-advisory
- ADV-2009-0851 vdb-entry