Description
The (1) Cisco Unified Communications Manager Express; (2) SIP Gateway Signaling Support Over Transport Layer Security (TLS) Transport; (3) Secure Signaling and Media Encryption; (4) Blocks Extensible Exchange Protocol (BEEP); (5) Network Admission Control HTTP Authentication Proxy; (6) Per-user URL Redirect for EAPoUDP, Dot1x, and MAC Authentication Bypass; (7) Distributed Director with HTTP Redirects; and (8) TCP DNS features in Cisco IOS 12.0 through 12.4 do not properly handle IP sockets, which allows remote attackers to cause a denial of service (outage or resource consumption) via a series of crafted TCP packets.
References
- 34242 vdb-entry
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080a90469.shtml
- 34438 third-party-advisory
- 20090325 Cisco IOS Software Multiple Features IP Sockets Vulnerability vendor-advisory
- ios-ipsockets-dos(49418) vdb-entry
- ADV-2009-0851 vdb-entry
- 1021897 vdb-entry