Description
The authentication manager process in the web framework in Cisco Intrusion Prevention System (IPS) does not properly handle user tokens, which allows remote attackers to cause a denial of service (intermittent MainApp hang) via a crafted management-interface connection request, aka Bug ID CSCuf20148.
References
- 20130919 Cisco IPS Authentication Manager Denial of Service Vulnerability vendor-advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=30913
- cisco-ips-cve20135497-dos(87280) vdb-entry
- 97525 vdb-entry
- 1029057 vdb-entry
- 62517 vdb-entry