Description
Memory leak in the Cisco Tunneling Control Protocol (cTCP) encapsulation feature in Cisco IOS 12.4, when an Easy VPN (aka EZVPN) server is enabled, allows remote attackers to cause a denial of service (memory consumption and device crash) via a sequence of TCP packets.
References
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080a90469.shtml
- 20090325 Cisco IOS cTCP Denial of Service Vulnerability vendor-advisory
- 34438 third-party-advisory
- 34246 vdb-entry
- ios-ctcp-dos(49417) vdb-entry
- 1021895 vdb-entry
- ADV-2009-0851 vdb-entry