NVD

Id
53133  
Name
CVE-2007-0918  
Description
The ATOMIC.TCP signature engine in the Intrusion Prevention System (IPS) feature for Cisco IOS 12.4XA, 12.3YA, 12.3T, and other trains allows remote attackers to cause a denial of service (IPS crash and traffic loss) via unspecified manipulations that are not properly handled by the regular expression feature, as demonstrated using the 3123.0 (Netbus Pro Traffic) signature.  
Reject
 
CVSS Version
2  
CVSS Score
7.1  
Severity
High  
CVSS Base Score
7.1  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:N/A:C)  
Pub Date
2017-01-07  
Published
2007-02-13  
Modified Date
2011-07-15  
Seq
2007-0918  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
268794 53133 CVE-2007-0918 oval:org.mitre.oval:def:5832  View
268795 53133 CVE-2007-0918 20070213 Multiple IOS IPS Vulnerabilities  View
268796 53133 CVE-2007-0918 http://www.cisco.com/en/US/products/products_security_response09186a00807e0a5e.html  View
268797 53133 CVE-2007-0918 22549  View
268798 53133 CVE-2007-0918 1017631  View
268799 53133 CVE-2007-0918 ADV-2007-0597  View
268800 53133 CVE-2007-0918 cisco-ios-ips-dos(32474)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
51477 JVNDB-2007-000139 Cisco IOS の IPS 機能におけるサービス運用妨害 (DoS) の脆弱性 Cisco IOS の IPS (侵入防御システム) 機能には、ATOMIC.TCP シグネチャエンジンにおいて正規表現機能を利用する特定の IPS シグネチャを適切に取り扱わないため、デバイスがクラッシュする、あるいはトラフィック ロスが生じる問題が存在ます。 CVE-2007-0918 24273 CVE-2007-0918 53133 5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000139.html 2007-02-13 2007-04-01 View