Published: 25/03/2010 Updated: 13/07/2010

CVSS v2 Base Score: 7.8 | Impact Score: 6.9 | Exploitability Score: 10

VMScore: 694

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C

Unspecified vulnerability in Cisco IOS 12.4, when NAT SCCP fragmentation support is enabled, allows remote malicious users to cause a denial of service (device reload) via crafted Skinny Client Control Protocol (SCCP) packets, aka Bug ID CSCsy09250.

Vulnerable Product	Search on Vulmon	Subscribe to Product
cisco ios 12.4gc
cisco ios 12.4xg
cisco ios 12.4xj
cisco ios 12.4xt
cisco ios 12.4xv
cisco ios 12.4ye
cisco ios 12.4md
cisco ios 12.4mda
cisco ios 12.4xk
cisco ios 12.4xl
cisco ios 12.4xw
cisco ios 12.4xy
cisco ios 12.4sw
cisco ios 12.4t
cisco ios 12.4xm
cisco ios 12.4xn
cisco ios 12.4xp
cisco ios 12.4xz
cisco ios 12.4ya
cisco ios 12.4yg
cisco ios 12.4xe
cisco ios 12.4xf
cisco ios 12.4xq
cisco ios 12.4xr
cisco ios 12.4yb
cisco ios 12.4yd

Skinny Client Control Protocol (SCCP) crafted messages may cause a Cisco IOS device that is configured with the Network Address Translation (NAT) SCCP Fragmentation Support feature to reload Cisco has released software updates that address this vulnerability A workaround that mitigates this vulnerability is available This advisory is posted at ...

NVD-CWE-noinfo http://www.cisco.com/en/US/products/products_security_advisory09186a0080b20ee6.shtml http://secunia.com/advisories/39062 http://osvdb.org/63187 http://www.securitytracker.com/id?1023739 http://www.vupen.com/english/advisories/2010/0708 https://nvd.nist.gov http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20100324-sccp

CVE-2010-0584

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect