CVE

Id
5276  
CVE No.
CVE-2002-0886  
Status
Candidate  
Description
Cisco DSL CPE devices running CBOS 2.4.4 and earlier allows remote attackers to cause a denial of service (hang or memory consumption) via (1) a large packet to the DHCP port, (2) a large packet to the Telnet port, or (3) a flood of large packets to the CPE, which causes the TCP/IP stack to consume large amounts of memory.  
Phase
Modified (20050601)  
Votes
ACCEPT(5) Alderson, Armstrong, Baker, Cole, Frech | NOOP(2) Cox, Foat | RECAST(1) Jones  
Comments
Jones> A single large packet DoS to a listening service (which sounds | like a buffer overflow) seems like a different vulnerability than multiple | large packets (which is admittedly resource consumption). Suggest SPLIT | into two items, prolems 1 and 2 in A, and problem 3 in B.  

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
28242 5276 CVE-2002-0886 CISCO:20020523 CBOS - Improving Resilience to Denial-of-Service Attacks  View
28243 5276 CVE-2002-0886 URL:http://www.cisco.com/warp/public/707/CBOS-DoS.shtml  View
28244 5276 CVE-2002-0886 BID:4813  View
28245 5276 CVE-2002-0886 URL:http://www.securityfocus.com/bid/4813  View
28246 5276 CVE-2002-0886 BID:4814  View
28247 5276 CVE-2002-0886 URL:http://www.securityfocus.com/bid/4814  View
28248 5276 CVE-2002-0886 BID:4815  View
28249 5276 CVE-2002-0886 URL:http://www.securityfocus.com/bid/4815  View
28250 5276 CVE-2002-0886 XF:cisco-cbos-dhcp-dos(9151)  View
28251 5276 CVE-2002-0886 URL:http://www.iss.net/security_center/static/9151.php  View
28252 5276 CVE-2002-0886 XF:cisco-cbos-telnet-cpe-dos(9152)  View
28253 5276 CVE-2002-0886 URL:http://xforce.iss.net/xforce/xfdb/9152  View
28254 5276 CVE-2002-0886 XF:cisco-cbos-tcpip-dos(9153)  View

Related JVN