CVE-2004-0244

Cisco IOS 12 MSFC2 - Layer 2 Frame Denial of Service

Severity Score

4.7

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

Cisco 6000, 6500, and 7600 series systems with Multilayer Switch Feature Card 2 (MSFC2) and a FlexWAN or OSM module allow local users to cause a denial of service (hang or reset) by sending a layer 2 frame packet that encapsulates a layer 3 packet, but has inconsistent length values with that packet.

Los sistemas Cisco de la serie 6000, 6500 y 76000 con Multilayer Switch Feature Card 2 (MSFC2) y módulo OSM FlexWAN permiten que usuarios locales causen una denegación de servicio enviando un paquete de capa 2 que encapsule otro de capa 3, pero con valores de longitud incorrecto para ese paquete.

*Credits: N/A

CVSS Scores

NISTv2 4.7

Attack Vector

Local

Attack Complexity

Medium

Authentication

None

Confidentiality

None

Integrity

None

Availability

Complete

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2004-02-03 First Exploit
2004-03-17 CVE Reserved
2004-03-18 CVE Published
2023-09-24 EPSS Updated
2024-08-08 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date

CWE

CWE-20: Improper Input Validation

CAPEC

References (7)

URL	Tag	Source
http://secunia.com/advisories/10780	Third Party Advisory
http://www.kb.cert.org/vuls/id/810062	Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/15013	Vdb Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5828	Signature

URL	Date	SRC
https://www.exploit-db.com/exploits/23638	2004-02-03

URL	Date	SRC

URL	Date	SRC
http://www.cisco.com/warp/public/707/cisco-sa-20040203-cat6k.shtml	2017-10-11
http://www.securityfocus.com/bid/9562	2017-10-11

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				12.1e Search vendor "Cisco" for product "Ios" and version "12.1e"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				12.2sy Search vendor "Cisco" for product "Ios" and version "12.2sy"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				12.2za Search vendor "Cisco" for product "Ios" and version "12.2za"		-		Affected