NVD

Id
54976  
Name
CVE-2007-2813  
Description
Cisco IOS 12.4 and earlier, when using the crypto packages and SSL support is enabled, allows remote attackers to cause a denial of service via a malformed (1) ClientHello, (2) ChangeCipherSpec, or (3) Finished message during an SSL session.  
Reject
 
CVSS Version
2  
CVSS Score
7.8  
Severity
High  
CVSS Base Score
7.8  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:C)  
Pub Date
2017-01-07  
Published
2007-05-22  
Modified Date
2011-03-07  
Seq
2007-2813  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
279135 54976 CVE-2007-2813 oval:org.mitre.oval:def:5745  View
279136 54976 CVE-2007-2813 20070522 Multiple Vulnerabilities in Cisco IOS While Processing SSL Packets  View
279137 54976 CVE-2007-2813 24097  View
279138 54976 CVE-2007-2813 1018094  View
279139 54976 CVE-2007-2813 ADV-2007-1910  View
279140 54976 CVE-2007-2813 cisco-ios-clienthello-dos(34432)  View
279141 54976 CVE-2007-2813 cisco-ios-changecipherspec-dos(34436)  View
279142 54976 CVE-2007-2813 cisco-ios-finished-dos(34442)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
51742 JVNDB-2007-000405 Cisco IOS における不正な SSL パケットによるサービス運用妨害 (DoS) の脆弱性 Cisco IOS には、SSL プロトコルで使用される ClientHello、ChangeCipherSpec や Finished メッセージの処理に不備が存在するため、不正な SSL パケットの処理によりサービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2007-2813 26168 CVE-2007-2813 54976 7.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000405.html 2007-05-22 2007-06-06 View