Published: 31/05/2011 Updated: 07/09/2011

CVSS v2 Base Score: 7.8 | Impact Score: 6.9 | Exploitability Score: 10

VMScore: 694

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C

The Internet Streamer application in Cisco Content Delivery System (CDS) with software 2.5.7, 2.5.8, and 2.5.9 before build 126 allows remote malicious users to cause a denial of service (Web Engine crash) via a crafted URL, aka Bug IDs CSCtg67333 and CSCth25341.

Vulnerable Product	Search on Vulmon	Subscribe to Product
cisco content_delivery_system_engine
cisco content_delivery_system 2.5.8
cisco content_delivery_system 2.5.9
cisco content_delivery_system 2.5.7

The Cisco Internet Streamer application, part of the Cisco Content Delivery System (Cisco CDS), contains a vulnerability in its web server component that could cause the web server engine to crash when processing specially crafted URLs Cisco has released software updates that address this vulnerability Workarounds that mitigate this vulnerabili ...

CWE-399 http://www.cisco.com/en/US/products/products_security_advisory09186a0080b7f18b.shtml http://www.securitytracker.com/id?1025564 https://nvd.nist.gov http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20110525-spcdn

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2011-1649

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect