Unscored CVE-2011-0949 EUVD-2011-0961GHSA-2j4h-p58q-g7mp

Cisco IOS XR 3.6.x, 3.8.x before 3.8.3, and 3.9.x before 3.9.1 does not properly remove sshd_lock files from /tmp/, which allows remote att…

Published May 31, 2011 · Updated Sep 17, 2024 · Assigned by cisco

Description

Cisco IOS XR 3.6.x, 3.8.x before 3.8.3, and 3.9.x before 3.9.1 does not properly remove sshd_lock files from /tmp/, which allows remote attackers to cause a denial of service (disk consumption) by making many SSHv1 connections, aka Bug ID CSCtd64417.

References

20110525 Cisco IOS XR Software SSHv1 Denial of Service Vulnerability vendor-advisory