CVE-2010-2836 (GCVE-0-2010-2836)

Vulnerability from cvelistv5 – Published: 2010-09-23 18:00 – Updated: 2024-09-16 19:56

Summary

Severity

No CVSS data available.

CWE

Assigner

cisco mitre root

References

1 reference

URL	Tags
http://www.cisco.com/en/US/products/products_secu…	vendor-advisoryx_refsource_CISCO

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T02:46:48.832Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "20100922 Cisco IOS SSL VPN Vulnerability",
            "tags": [
              "vendor-advisory",
              "x_refsource_CISCO",
              "x_transferred"
            ],
            "url": "http://www.cisco.com/en/US/products/products_security_advisory09186a0080b4a312.shtml"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Memory leak in the SSL VPN feature in Cisco IOS 12.4, 15.0, and 15.1, when HTTP port redirection is enabled, allows remote attackers to cause a denial of service (memory consumption) by improperly disconnecting SSL sessions, leading to connections that remain in the CLOSE-WAIT state, aka Bug ID CSCtg21685."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2010-09-23T18:00:00.000Z",
        "orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
        "shortName": "cisco"
      },
      "references": [
        {
          "name": "20100922 Cisco IOS SSL VPN Vulnerability",
          "tags": [
            "vendor-advisory",
            "x_refsource_CISCO"
          ],
          "url": "http://www.cisco.com/en/US/products/products_security_advisory09186a0080b4a312.shtml"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "psirt@cisco.com",
          "ID": "CVE-2010-2836",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Memory leak in the SSL VPN feature in Cisco IOS 12.4, 15.0, and 15.1, when HTTP port redirection is enabled, allows remote attackers to cause a denial of service (memory consumption) by improperly disconnecting SSL sessions, leading to connections that remain in the CLOSE-WAIT state, aka Bug ID CSCtg21685."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "20100922 Cisco IOS SSL VPN Vulnerability",
              "refsource": "CISCO",
              "url": "http://www.cisco.com/en/US/products/products_security_advisory09186a0080b4a312.shtml"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
    "assignerShortName": "cisco",
    "cveId": "CVE-2010-2836",
    "datePublished": "2010-09-23T18:00:00.000Z",
    "dateReserved": "2010-07-23T00:00:00.000Z",
    "dateUpdated": "2024-09-16T19:56:28.659Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2010-2836",
      "date": "2026-09-18",
      "epss": "0.01763",
      "percentile": "0.77008"
    },
    "fkie_nvd": {
      "configurations": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:cisco:ios:12.4:*:*:*:*:*:*:*",
                  "matchCriteriaId": "9D4D8C72-E7BB-40BF-9AE5-622794D63E09",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:cisco:ios:12.4gc:*:*:*:*:*:*:*",
                  "matchCriteriaId": "89B19F2B-1D89-42FC-89A7-737D8109EB1B",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:cisco:ios:12.4mda:*:*:*:*:*:*:*",
                  "matchCriteriaId": "237F6EDD-AB47-4768-9C75-C0B03E23696B",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:cisco:ios:12.4mr:*:*:*:*:*:*:*",
                  "matchCriteriaId": "C7414D32-88A1-416E-A717-3F47B6D1BE74",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:cisco:ios:12.4mra:*:*:*:*:*:*:*",
                  "matchCriteriaId": "860A1477-49B5-4356-9D83-A1A092233D55",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:cisco:ios:12.4sw:*:*:*:*:*:*:*",
                  "matchCriteriaId": "370DC543-AC01-4B91-88C7-60C323E35929",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:cisco:ios:12.4xa:*:*:*:*:*:*:*",
                  "matchCriteriaId": "99235FFB-4439-40B2-ADBD-B08E5DBBCCB9",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:cisco:ios:12.4xb:*:*:*:*:*:*:*",
                  "matchCriteriaId": "C1797E4E-E15C-4148-9B3D-4FF6D1D815AF",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:cisco:ios:12.4xc:*:*:*:*:*:*:*",
                  "matchCriteriaId": "544BD924-2CBD-4130-BBD3-5AD084C85FE5",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:cisco:ios:12.4xd:*:*:*:*:*:*:*",
                  "matchCriteriaId": "6B78181E-E1D1-4C25-85DE-CA46BBF21765",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:cisco:ios:12.4xe:*:*:*:*:*:*:*",
                  "matchCriteriaId": "C1F36C3D-E9A2-41A1-BE71-4D8B00D228E0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:cisco:ios:12.4xf:*:*:*:*:*:*:*",
                  "matchCriteriaId": "7D1CD80F-E898-41CE-8A86-28C2F48B928A",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:cisco:ios:12.4xg:*:*:*:*:*:*:*",
                  "matchCriteriaId": "9C3C3B97-7F1E-4B87-AD44-E4230BCDAB7D",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:cisco:ios:12.4xj:*:*:*:*:*:*:*",
                  "matchCriteriaId": "BF610051-1638-4C1B-9864-11E34EFC4DE6",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:cisco:ios:12.4xk:*:*:*:*:*:*:*",
                  "matchCriteriaId": "78260223-50C0-48F8-9A65-AE67489E602C",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:cisco:ios:12.4xl:*:*:*:*:*:*:*",
                  "matchCriteriaId": "18E39462-4CEE-4C29-8B60-50E05FCF3E91",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:cisco:ios:12.4xm:*:*:*:*:*:*:*",
                  "matchCriteriaId": "3FF16123-CCA0-4ECD-9B8C-AC1534C3F244",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:cisco:ios:12.4xn:*:*:*:*:*:*:*",
                  "matchCriteriaId": "CC7454AF-7610-4CD3-BD2B-95A6C3283811",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:cisco:ios:12.4xp:*:*:*:*:*:*:*",
                  "matchCriteriaId": "AB633E6C-025C-4B31-ABE7-8318C813376B",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:cisco:ios:12.4xt:*:*:*:*:*:*:*",
                  "matchCriteriaId": "DFED1FFB-899D-4A48-9CCA-0B8737AE1408",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:cisco:ios:12.4xv:*:*:*:*:*:*:*",
                  "matchCriteriaId": "883FA166-2973-42BA-842D-28FBDBFEAC4A",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:cisco:ios:12.4xw:*:*:*:*:*:*:*",
                  "matchCriteriaId": "4362045B-7065-4FF9-A977-B3DA7894F831",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:cisco:ios:12.4xy:*:*:*:*:*:*:*",
                  "matchCriteriaId": "BC27E79D-6B4B-4839-9664-DFE821C45C2E",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:cisco:ios:12.4xz:*:*:*:*:*:*:*",
                  "matchCriteriaId": "4963A243-74FA-43AD-9645-C9FAD527A6E1",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:cisco:ios:12.4ya:*:*:*:*:*:*:*",
                  "matchCriteriaId": "31C6EACA-35BE-4032-93DA-5F738AEE0F4A",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:cisco:ios:12.4yb:*:*:*:*:*:*:*",
                  "matchCriteriaId": "E67621EA-25D8-47C2-ADEA-512E38F2FFE3",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:cisco:ios:12.4yd:*:*:*:*:*:*:*",
                  "matchCriteriaId": "94E1421B-2B86-41B2-9288-59780E081337",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:cisco:ios:15.0m:*:*:*:*:*:*:*",
                  "matchCriteriaId": "3D03374C-7EF0-4455-839E-09CA4F2E85BC",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:cisco:ios:15.0xa:*:*:*:*:*:*:*",
                  "matchCriteriaId": "EC6EF56C-032C-43F6-A979-E18BEA0E16A6",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:cisco:ios:15.1\\(1\\)xb1:*:*:*:*:*:*:*",
                  "matchCriteriaId": "2D30CD49-F004-4830-A33E-9FC6E423CEA4",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:cisco:ios:15.1t:*:*:*:*:*:*:*",
                  "matchCriteriaId": "5FAFA073-B16F-475F-B68D-8FE9135AB0A4",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Memory leak in the SSL VPN feature in Cisco IOS 12.4, 15.0, and 15.1, when HTTP port redirection is enabled, allows remote attackers to cause a denial of service (memory consumption) by improperly disconnecting SSL sessions, leading to connections that remain in the CLOSE-WAIT state, aka Bug ID CSCtg21685."
        },
        {
          "lang": "es",
          "value": "Fuga de memoria en la funcionalidad SSL VPN en Cisco IOS v12.4, v15.0, y v15.1, cuando  HTTP port redirection est\u00e1 habilitado, permite a atacantes remotos causar una denegaci\u00f3n de servicio (corrupci\u00f3n de memoria) al desconectar incorrectamente sesiones SSL generando que las conexiones permanezcan en estado CLOSE-WAIT, tambi\u00e9n conocido como fallo ID CSCtg21685."
        }
      ],
      "id": "CVE-2010-2836",
      "lastModified": "2024-11-21T01:17:28.127",
      "metrics": {
        "cvssMetricV2": [
          {
            "acInsufInfo": false,
            "baseSeverity": "HIGH",
            "cvssData": {
              "accessComplexity": "LOW",
              "accessVector": "NETWORK",
              "authentication": "NONE",
              "availabilityImpact": "COMPLETE",
              "baseScore": 7.8,
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
              "version": "2.0"
            },
            "exploitabilityScore": 10.0,
            "impactScore": 6.9,
            "obtainAllPrivilege": false,
            "obtainOtherPrivilege": false,
            "obtainUserPrivilege": false,
            "source": "nvd@nist.gov",
            "type": "Primary",
            "userInteractionRequired": false
          }
        ]
      },
      "published": "2010-09-23T19:00:13.980",
      "references": [
        {
          "source": "ykramarz@cisco.com",
          "tags": [
            "Patch",
            "Vendor Advisory"
          ],
          "url": "http://www.cisco.com/en/US/products/products_security_advisory09186a0080b4a312.shtml"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "tags": [
            "Patch",
            "Vendor Advisory"
          ],
          "url": "http://www.cisco.com/en/US/products/products_security_advisory09186a0080b4a312.shtml"
        }
      ],
      "sourceIdentifier": "ykramarz@cisco.com",
      "vulnStatus": "Modified",
      "weaknesses": [
        {
          "description": [
            {
              "lang": "en",
              "value": "CWE-399"
            }
          ],
          "source": "nvd@nist.gov",
          "type": "Primary"
        }
      ]
    },
    "nvd": {
      "cve": {
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:cisco:ios:12.4:*:*:*:*:*:*:*",
                    "matchCriteriaId": "9D4D8C72-E7BB-40BF-9AE5-622794D63E09",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:cisco:ios:12.4gc:*:*:*:*:*:*:*",
                    "matchCriteriaId": "89B19F2B-1D89-42FC-89A7-737D8109EB1B",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:cisco:ios:12.4mda:*:*:*:*:*:*:*",
                    "matchCriteriaId": "237F6EDD-AB47-4768-9C75-C0B03E23696B",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:cisco:ios:12.4mr:*:*:*:*:*:*:*",
                    "matchCriteriaId": "C7414D32-88A1-416E-A717-3F47B6D1BE74",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:cisco:ios:12.4mra:*:*:*:*:*:*:*",
                    "matchCriteriaId": "860A1477-49B5-4356-9D83-A1A092233D55",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:cisco:ios:12.4sw:*:*:*:*:*:*:*",
                    "matchCriteriaId": "370DC543-AC01-4B91-88C7-60C323E35929",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:cisco:ios:12.4xa:*:*:*:*:*:*:*",
                    "matchCriteriaId": "99235FFB-4439-40B2-ADBD-B08E5DBBCCB9",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:cisco:ios:12.4xb:*:*:*:*:*:*:*",
                    "matchCriteriaId": "C1797E4E-E15C-4148-9B3D-4FF6D1D815AF",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:cisco:ios:12.4xc:*:*:*:*:*:*:*",
                    "matchCriteriaId": "544BD924-2CBD-4130-BBD3-5AD084C85FE5",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:cisco:ios:12.4xd:*:*:*:*:*:*:*",
                    "matchCriteriaId": "6B78181E-E1D1-4C25-85DE-CA46BBF21765",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:cisco:ios:12.4xe:*:*:*:*:*:*:*",
                    "matchCriteriaId": "C1F36C3D-E9A2-41A1-BE71-4D8B00D228E0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:cisco:ios:12.4xf:*:*:*:*:*:*:*",
                    "matchCriteriaId": "7D1CD80F-E898-41CE-8A86-28C2F48B928A",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:cisco:ios:12.4xg:*:*:*:*:*:*:*",
                    "matchCriteriaId": "9C3C3B97-7F1E-4B87-AD44-E4230BCDAB7D",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:cisco:ios:12.4xj:*:*:*:*:*:*:*",
                    "matchCriteriaId": "BF610051-1638-4C1B-9864-11E34EFC4DE6",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:cisco:ios:12.4xk:*:*:*:*:*:*:*",
                    "matchCriteriaId": "78260223-50C0-48F8-9A65-AE67489E602C",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:cisco:ios:12.4xl:*:*:*:*:*:*:*",
                    "matchCriteriaId": "18E39462-4CEE-4C29-8B60-50E05FCF3E91",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:cisco:ios:12.4xm:*:*:*:*:*:*:*",
                    "matchCriteriaId": "3FF16123-CCA0-4ECD-9B8C-AC1534C3F244",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:cisco:ios:12.4xn:*:*:*:*:*:*:*",
                    "matchCriteriaId": "CC7454AF-7610-4CD3-BD2B-95A6C3283811",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:cisco:ios:12.4xp:*:*:*:*:*:*:*",
                    "matchCriteriaId": "AB633E6C-025C-4B31-ABE7-8318C813376B",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:cisco:ios:12.4xt:*:*:*:*:*:*:*",
                    "matchCriteriaId": "DFED1FFB-899D-4A48-9CCA-0B8737AE1408",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:cisco:ios:12.4xv:*:*:*:*:*:*:*",
                    "matchCriteriaId": "883FA166-2973-42BA-842D-28FBDBFEAC4A",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:cisco:ios:12.4xw:*:*:*:*:*:*:*",
                    "matchCriteriaId": "4362045B-7065-4FF9-A977-B3DA7894F831",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:cisco:ios:12.4xy:*:*:*:*:*:*:*",
                    "matchCriteriaId": "BC27E79D-6B4B-4839-9664-DFE821C45C2E",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:cisco:ios:12.4xz:*:*:*:*:*:*:*",
                    "matchCriteriaId": "4963A243-74FA-43AD-9645-C9FAD527A6E1",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:cisco:ios:12.4ya:*:*:*:*:*:*:*",
                    "matchCriteriaId": "31C6EACA-35BE-4032-93DA-5F738AEE0F4A",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:cisco:ios:12.4yb:*:*:*:*:*:*:*",
                    "matchCriteriaId": "E67621EA-25D8-47C2-ADEA-512E38F2FFE3",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:cisco:ios:12.4yd:*:*:*:*:*:*:*",
                    "matchCriteriaId": "94E1421B-2B86-41B2-9288-59780E081337",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:cisco:ios:15.0m:*:*:*:*:*:*:*",
                    "matchCriteriaId": "3D03374C-7EF0-4455-839E-09CA4F2E85BC",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:cisco:ios:15.0xa:*:*:*:*:*:*:*",
                    "matchCriteriaId": "EC6EF56C-032C-43F6-A979-E18BEA0E16A6",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:cisco:ios:15.1\\(1\\)xb1:*:*:*:*:*:*:*",
                    "matchCriteriaId": "2D30CD49-F004-4830-A33E-9FC6E423CEA4",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:cisco:ios:15.1t:*:*:*:*:*:*:*",
                    "matchCriteriaId": "5FAFA073-B16F-475F-B68D-8FE9135AB0A4",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "Memory leak in the SSL VPN feature in Cisco IOS 12.4, 15.0, and 15.1, when HTTP port redirection is enabled, allows remote attackers to cause a denial of service (memory consumption) by improperly disconnecting SSL sessions, leading to connections that remain in the CLOSE-WAIT state, aka Bug ID CSCtg21685."
          },
          {
            "lang": "es",
            "value": "Fuga de memoria en la funcionalidad SSL VPN en Cisco IOS v12.4, v15.0, y v15.1, cuando  HTTP port redirection est\u00e1 habilitado, permite a atacantes remotos causar una denegaci\u00f3n de servicio (corrupci\u00f3n de memoria) al desconectar incorrectamente sesiones SSL generando que las conexiones permanezcan en estado CLOSE-WAIT, tambi\u00e9n conocido como fallo ID CSCtg21685."
          }
        ],
        "id": "CVE-2010-2836",
        "lastModified": "2026-04-29T01:13:23.040",
        "metrics": {
          "cvssMetricV2": [
            {
              "acInsufInfo": false,
              "baseSeverity": "HIGH",
              "cvssData": {
                "accessComplexity": "LOW",
                "accessVector": "NETWORK",
                "authentication": "NONE",
                "availabilityImpact": "COMPLETE",
                "baseScore": 7.8,
                "confidentialityImpact": "NONE",
                "integrityImpact": "NONE",
                "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
                "version": "2.0"
              },
              "exploitabilityScore": 10.0,
              "impactScore": 6.9,
              "obtainAllPrivilege": false,
              "obtainOtherPrivilege": false,
              "obtainUserPrivilege": false,
              "source": "nvd@nist.gov",
              "type": "Primary",
              "userInteractionRequired": false
            }
          ]
        },
        "published": "2010-09-23T19:00:13.980",
        "references": [
          {
            "source": "psirt@cisco.com",
            "tags": [
              "Patch",
              "Vendor Advisory"
            ],
            "url": "http://www.cisco.com/en/US/products/products_security_advisory09186a0080b4a312.shtml"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Patch",
              "Vendor Advisory"
            ],
            "url": "http://www.cisco.com/en/US/products/products_security_advisory09186a0080b4a312.shtml"
          }
        ],
        "sourceIdentifier": "psirt@cisco.com",
        "vulnStatus": "Modified",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-399"
              }
            ],
            "source": "nvd@nist.gov",
            "type": "Primary"
          }
        ]
      }
    }
  }
}

CERTA-2010-AVI-456

Vulnerability from certfr_avis - Published: - Updated:

Plusieurs vulnérabilités sont présentes dans Cisco IOS. Toutes ces vulnérabilités permettent à un utilisateur distant malintentionné de provoquer un déni de service.

Description

Plusieurs vulnérabilités sont présentes dans le système d'exploitation Cisco IOS utilisé sur les équipements Cisco (eg. routeurs, commutateurs, etc.). Elles sont relatives à la mise en œuvre :

de la translation d'adresse (NAT) ;
du protocole SIP ;
des VPN de type SSL ;
du protocole H323 ;
du protocole IGMP.

Toutes ces failles permettent à un utilisateur malintentionné de provoquer un déni de service à distance si une ou plusieurs de ces fonctionnalités sont activées sur l'équipement vulnérable.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Les équiepement utilisant Cisco IOS comme système d'exploitation.

Impacted products

	Vendor	Product	Description

References

Title

Publication Time

CERTA-2010-AVI-456

Vulnerability from certfr_avis - Published: - Updated:

Plusieurs vulnérabilités sont présentes dans Cisco IOS. Toutes ces vulnérabilités permettent à un utilisateur distant malintentionné de provoquer un déni de service.

Description

de la translation d'adresse (NAT) ;
du protocole SIP ;
des VPN de type SSL ;
du protocole H323 ;
du protocole IGMP.

Toutes ces failles permettent à un utilisateur malintentionné de provoquer un déni de service à distance si une ou plusieurs de ces fonctionnalités sont activées sur l'équipement vulnérable.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Les équiepement utilisant Cisco IOS comme système d'exploitation.

Impacted products

	Vendor	Product	Description

References

Title

Publication Time

FKIE_CVE-2010-2836

Vulnerability from fkie_nvd - Published: 2010-09-23 19:00 - Updated: 2026-06-16 23:21

Severity

Summary

References

	URL	Tags
	psirt@cisco.com	http://www.cisco.com/en/US/products/products_security_advisory09186a0080b4a312.shtml	Patch, Vendor Advisory
	af854a3a-2127-422b-91ae-364da2661108	http://www.cisco.com/en/US/products/products_security_advisory09186a0080b4a312.shtml	Patch, Vendor Advisory

Impacted products

Vendor	Product	Version
cisco	ios	12.4
cisco	ios	12.4gc
cisco	ios	12.4mda
cisco	ios	12.4mr
cisco	ios	12.4mra
cisco	ios	12.4sw
cisco	ios	12.4xa
cisco	ios	12.4xb
cisco	ios	12.4xc
cisco	ios	12.4xd
cisco	ios	12.4xe
cisco	ios	12.4xf
cisco	ios	12.4xg
cisco	ios	12.4xj
cisco	ios	12.4xk
cisco	ios	12.4xl
cisco	ios	12.4xm
cisco	ios	12.4xn
cisco	ios	12.4xp
cisco	ios	12.4xt
cisco	ios	12.4xv
cisco	ios	12.4xw
cisco	ios	12.4xy
cisco	ios	12.4xz
cisco	ios	12.4ya
cisco	ios	12.4yb
cisco	ios	12.4yd
cisco	ios	15.0m
cisco	ios	15.0xa
cisco	ios	15.1\(1\)xb1
cisco	ios	15.1t

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "source": "psirt@cisco.com"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:cisco:ios:12.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "9D4D8C72-E7BB-40BF-9AE5-622794D63E09",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:12.4gc:*:*:*:*:*:*:*",
              "matchCriteriaId": "89B19F2B-1D89-42FC-89A7-737D8109EB1B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:12.4mda:*:*:*:*:*:*:*",
              "matchCriteriaId": "237F6EDD-AB47-4768-9C75-C0B03E23696B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:12.4mr:*:*:*:*:*:*:*",
              "matchCriteriaId": "C7414D32-88A1-416E-A717-3F47B6D1BE74",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:12.4mra:*:*:*:*:*:*:*",
              "matchCriteriaId": "860A1477-49B5-4356-9D83-A1A092233D55",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:12.4sw:*:*:*:*:*:*:*",
              "matchCriteriaId": "370DC543-AC01-4B91-88C7-60C323E35929",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:12.4xa:*:*:*:*:*:*:*",
              "matchCriteriaId": "99235FFB-4439-40B2-ADBD-B08E5DBBCCB9",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:12.4xb:*:*:*:*:*:*:*",
              "matchCriteriaId": "C1797E4E-E15C-4148-9B3D-4FF6D1D815AF",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:12.4xc:*:*:*:*:*:*:*",
              "matchCriteriaId": "544BD924-2CBD-4130-BBD3-5AD084C85FE5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:12.4xd:*:*:*:*:*:*:*",
              "matchCriteriaId": "6B78181E-E1D1-4C25-85DE-CA46BBF21765",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:12.4xe:*:*:*:*:*:*:*",
              "matchCriteriaId": "C1F36C3D-E9A2-41A1-BE71-4D8B00D228E0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:12.4xf:*:*:*:*:*:*:*",
              "matchCriteriaId": "7D1CD80F-E898-41CE-8A86-28C2F48B928A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:12.4xg:*:*:*:*:*:*:*",
              "matchCriteriaId": "9C3C3B97-7F1E-4B87-AD44-E4230BCDAB7D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:12.4xj:*:*:*:*:*:*:*",
              "matchCriteriaId": "BF610051-1638-4C1B-9864-11E34EFC4DE6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:12.4xk:*:*:*:*:*:*:*",
              "matchCriteriaId": "78260223-50C0-48F8-9A65-AE67489E602C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:12.4xl:*:*:*:*:*:*:*",
              "matchCriteriaId": "18E39462-4CEE-4C29-8B60-50E05FCF3E91",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:12.4xm:*:*:*:*:*:*:*",
              "matchCriteriaId": "3FF16123-CCA0-4ECD-9B8C-AC1534C3F244",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:12.4xn:*:*:*:*:*:*:*",
              "matchCriteriaId": "CC7454AF-7610-4CD3-BD2B-95A6C3283811",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:12.4xp:*:*:*:*:*:*:*",
              "matchCriteriaId": "AB633E6C-025C-4B31-ABE7-8318C813376B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:12.4xt:*:*:*:*:*:*:*",
              "matchCriteriaId": "DFED1FFB-899D-4A48-9CCA-0B8737AE1408",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:12.4xv:*:*:*:*:*:*:*",
              "matchCriteriaId": "883FA166-2973-42BA-842D-28FBDBFEAC4A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:12.4xw:*:*:*:*:*:*:*",
              "matchCriteriaId": "4362045B-7065-4FF9-A977-B3DA7894F831",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:12.4xy:*:*:*:*:*:*:*",
              "matchCriteriaId": "BC27E79D-6B4B-4839-9664-DFE821C45C2E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:12.4xz:*:*:*:*:*:*:*",
              "matchCriteriaId": "4963A243-74FA-43AD-9645-C9FAD527A6E1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:12.4ya:*:*:*:*:*:*:*",
              "matchCriteriaId": "31C6EACA-35BE-4032-93DA-5F738AEE0F4A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:12.4yb:*:*:*:*:*:*:*",
              "matchCriteriaId": "E67621EA-25D8-47C2-ADEA-512E38F2FFE3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:12.4yd:*:*:*:*:*:*:*",
              "matchCriteriaId": "94E1421B-2B86-41B2-9288-59780E081337",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:15.0m:*:*:*:*:*:*:*",
              "matchCriteriaId": "3D03374C-7EF0-4455-839E-09CA4F2E85BC",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:15.0xa:*:*:*:*:*:*:*",
              "matchCriteriaId": "EC6EF56C-032C-43F6-A979-E18BEA0E16A6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:15.1\\(1\\)xb1:*:*:*:*:*:*:*",
              "matchCriteriaId": "2D30CD49-F004-4830-A33E-9FC6E423CEA4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:15.1t:*:*:*:*:*:*:*",
              "matchCriteriaId": "5FAFA073-B16F-475F-B68D-8FE9135AB0A4",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Memory leak in the SSL VPN feature in Cisco IOS 12.4, 15.0, and 15.1, when HTTP port redirection is enabled, allows remote attackers to cause a denial of service (memory consumption) by improperly disconnecting SSL sessions, leading to connections that remain in the CLOSE-WAIT state, aka Bug ID CSCtg21685."
    },
    {
      "lang": "es",
      "value": "Fuga de memoria en la funcionalidad SSL VPN en Cisco IOS v12.4, v15.0, y v15.1, cuando  HTTP port redirection est\u00e1 habilitado, permite a atacantes remotos causar una denegaci\u00f3n de servicio (corrupci\u00f3n de memoria) al desconectar incorrectamente sesiones SSL generando que las conexiones permanezcan en estado CLOSE-WAIT, tambi\u00e9n conocido como fallo ID CSCtg21685."
    }
  ],
  "id": "CVE-2010-2836",
  "lastModified": "2026-06-16T23:21:35.893",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "COMPLETE",
          "baseScore": 7.8,
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 6.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2010-09-23T19:00:13.980",
  "references": [
    {
      "source": "psirt@cisco.com",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://www.cisco.com/en/US/products/products_security_advisory09186a0080b4a312.shtml"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://www.cisco.com/en/US/products/products_security_advisory09186a0080b4a312.shtml"
    }
  ],
  "sourceIdentifier": "psirt@cisco.com",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-399"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

GHSA-7M26-WXJ8-3CQR

Vulnerability from github – Published: 2022-05-17 05:48 – Updated: 2022-05-17 05:48

Details

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2010-2836"
  ],
  "database_specific": {
    "cwe_ids": [],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2010-09-23T19:00:00Z",
    "severity": "HIGH"
  },
  "details": "Memory leak in the SSL VPN feature in Cisco IOS 12.4, 15.0, and 15.1, when HTTP port redirection is enabled, allows remote attackers to cause a denial of service (memory consumption) by improperly disconnecting SSL sessions, leading to connections that remain in the CLOSE-WAIT state, aka Bug ID CSCtg21685.",
  "id": "GHSA-7m26-wxj8-3cqr",
  "modified": "2022-05-17T05:48:05Z",
  "published": "2022-05-17T05:48:05Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-2836"
    },
    {
      "type": "WEB",
      "url": "http://www.cisco.com/en/US/products/products_security_advisory09186a0080b4a312.shtml"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}

GSD-2010-2836

Vulnerability from gsd - Updated: 2023-12-13 01:21

Details

Aliases

CVE-2010-2836

Aliases

CVE-2010-2836

JSON

To clipboard

{
  "GSD": {
    "alias": "CVE-2010-2836",
    "description": "Memory leak in the SSL VPN feature in Cisco IOS 12.4, 15.0, and 15.1, when HTTP port redirection is enabled, allows remote attackers to cause a denial of service (memory consumption) by improperly disconnecting SSL sessions, leading to connections that remain in the CLOSE-WAIT state, aka Bug ID CSCtg21685.",
    "id": "GSD-2010-2836"
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2010-2836"
      ],
      "details": "Memory leak in the SSL VPN feature in Cisco IOS 12.4, 15.0, and 15.1, when HTTP port redirection is enabled, allows remote attackers to cause a denial of service (memory consumption) by improperly disconnecting SSL sessions, leading to connections that remain in the CLOSE-WAIT state, aka Bug ID CSCtg21685.",
      "id": "GSD-2010-2836",
      "modified": "2023-12-13T01:21:31.692261Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "psirt@cisco.com",
        "ID": "CVE-2010-2836",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "n/a",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "n/a"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "n/a"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "Memory leak in the SSL VPN feature in Cisco IOS 12.4, 15.0, and 15.1, when HTTP port redirection is enabled, allows remote attackers to cause a denial of service (memory consumption) by improperly disconnecting SSL sessions, leading to connections that remain in the CLOSE-WAIT state, aka Bug ID CSCtg21685."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "n/a"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "20100922 Cisco IOS SSL VPN Vulnerability",
            "refsource": "CISCO",
            "url": "http://www.cisco.com/en/US/products/products_security_advisory09186a0080b4a312.shtml"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:o:cisco:ios:12.4mr:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:cisco:ios:12.4:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:cisco:ios:12.4gc:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:cisco:ios:12.4mda:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:cisco:ios:12.4xm:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:cisco:ios:12.4xn:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:cisco:ios:12.4xp:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:cisco:ios:12.4xt:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:cisco:ios:12.4sw:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:cisco:ios:12.4xb:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:cisco:ios:12.4xg:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:cisco:ios:12.4xk:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:cisco:ios:12.4xw:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:cisco:ios:12.4xz:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:cisco:ios:15.1\\(1\\)xb1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:cisco:ios:12.4xc:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:cisco:ios:12.4xd:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:cisco:ios:12.4xe:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:cisco:ios:12.4xf:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:cisco:ios:12.4yb:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:cisco:ios:12.4yd:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:cisco:ios:15.0m:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:cisco:ios:15.0xa:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:cisco:ios:12.4mra:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:cisco:ios:12.4xa:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:cisco:ios:12.4xj:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:cisco:ios:12.4xl:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:cisco:ios:12.4xv:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:cisco:ios:12.4xy:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:cisco:ios:12.4ya:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:cisco:ios:15.1t:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "psirt@cisco.com",
          "ID": "CVE-2010-2836"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "Memory leak in the SSL VPN feature in Cisco IOS 12.4, 15.0, and 15.1, when HTTP port redirection is enabled, allows remote attackers to cause a denial of service (memory consumption) by improperly disconnecting SSL sessions, leading to connections that remain in the CLOSE-WAIT state, aka Bug ID CSCtg21685."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "CWE-399"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "20100922 Cisco IOS SSL VPN Vulnerability",
              "refsource": "CISCO",
              "tags": [
                "Patch",
                "Vendor Advisory"
              ],
              "url": "http://www.cisco.com/en/US/products/products_security_advisory09186a0080b4a312.shtml"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "cvssV2": {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "COMPLETE",
            "baseScore": 7.8,
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "version": "2.0"
          },
          "exploitabilityScore": 10.0,
          "impactScore": 6.9,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "severity": "HIGH",
          "userInteractionRequired": false
        }
      },
      "lastModifiedDate": "2010-09-24T18:12Z",
      "publishedDate": "2010-09-23T19:00Z"
    }
  }
}

VAR-201009-0063

Vulnerability from variot - Updated: 2023-12-18 12:11

Memory leak in the SSL VPN feature in Cisco IOS 12.4, 15.0, and 15.1, when HTTP port redirection is enabled, allows remote attackers to cause a denial of service (memory consumption) by improperly disconnecting SSL sessions, leading to connections that remain in the CLOSE-WAIT state, aka Bug ID CSCtg21685. Cisco IOS is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to cause an affected device to reload or to stop accepting new TCP connections, denying service to legitimate users. This issue is tracked by Cisco Bug ID CSCtg21685. This vulnerability causes the connection to remain in the CLOSE-WAIT state. ----------------------------------------------------------------------

Windows Applications Insecure Library Loading

The Official, Verified Secunia List: http://secunia.com/advisories/windows_insecure_library_loading/

The list is continuously updated as we confirm the vulnerability reports so check back regularly too see if any of your apps are affected.

TITLE: Cisco IOS SSL VPN Memory Leak Denial of Service Vulnerability

SECUNIA ADVISORY ID: SA41552

VERIFY ADVISORY: Secunia.com http://secunia.com/advisories/41552/ Customer Area (Credentials Required) https://ca.secunia.com/?page=viewadvisory&vuln_id=41552

RELEASE DATE: 2010-09-24

DISCUSS ADVISORY: http://secunia.com/advisories/41552/#comments

AVAILABLE ON SITE AND IN CUSTOMER AREA: * Last Update * Popularity * Comments * Criticality Level * Impact * Where * Solution Status * Operating System / Software * CVE Reference(s)

http://secunia.com/advisories/41552/

ONLY AVAILABLE IN CUSTOMER AREA: * Authentication Level * Report Reliability * Secunia PoC * Secunia Analysis * Systems Affected * Approve Distribution * Remediation Status * Secunia CVSS Score * CVSS

https://ca.secunia.com/?page=viewadvisory&vuln_id=41552

ONLY AVAILABLE WITH SECUNIA CSI AND SECUNIA PSI: * AUTOMATED SCANNING

http://secunia.com/vulnerability_scanning/personal/ http://secunia.com/vulnerability_scanning/corporate/wsus_sccm_3rd_third_party_patching/

DESCRIPTION: A vulnerability has been reported in Cisco IOS, which can be exploited by malicious people to cause a DoS (Denial of Service). This can be exploited to exhaust available memory resources and e.g.

SOLUTION: Update to a fixed version.

PROVIDED AND/OR DISCOVERED BY: Reported by the vendor.

ORIGINAL ADVISORY: cisco-sa-20100922-sslvpn: http://www.cisco.com/warp/public/707/cisco-sa-20100922-sslvpn.shtml

OTHER REFERENCES: Further details available in Customer Area: http://secunia.com/products/corporate/EVM/

DEEP LINKS: Further details available in Customer Area: http://secunia.com/products/corporate/EVM/

EXTENDED DESCRIPTION: Further details available in Customer Area: http://secunia.com/products/corporate/EVM/

EXTENDED SOLUTION: Further details available in Customer Area: http://secunia.com/products/corporate/EVM/

EXPLOIT: Further details available in Customer Area: http://secunia.com/products/corporate/EVM/

About: This Advisory was delivered by Secunia as a free service to help private users keeping their systems up to date against the latest vulnerabilities.

Subscribe: http://secunia.com/advisories/secunia_security_advisories/

Definitions: (Criticality, Where etc.) http://secunia.com/advisories/about_secunia_advisories/

Please Note: Secunia recommends that you verify all advisories you receive by clicking the link. Secunia NEVER sends attached files with advisories. Secunia does not advise people to install third party patches, only use those supplied by the vendor.

Unsubscribe: Secunia Security Advisories http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org

. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1

Cisco IOS SSL VPN Vulnerability

Advisory ID: cisco-sa-20100922-sslvpn

http://www.cisco.com/warp/public/707/cisco-sa-20100922-sslvpn.shtml

Revision 1.0

For Public Release 2010 September 22 1600 UTC (GMT)

Summary

Cisco IOS Software contains a vulnerability when the Cisco IOS SSL VPN feature is configured with an HTTP redirect.

Cisco has released free software updates that address this vulnerability. There is a workaround to mitigate this vulnerability.

This advisory is posted at http://www.cisco.com/warp/public/707/cisco-sa-20100922-sslvpn.shtml

Note: The September 22, 2010, Cisco IOS Software Security Advisory bundled publication includes six Cisco Security Advisories. Five of the advisories address vulnerabilities in Cisco IOS Software, and one advisory addresses vulnerabilities in Cisco Unified Communications Manager. Each advisory lists the releases that correct the vulnerability or vulnerabilities detailed in the advisory. The table at the following URL lists releases that correct all Cisco IOS Software vulnerabilities that have been published on September 22, 2010, or earlier:

http://www.cisco.com/warp/public/707/cisco-sa-20100922-bundle.shtml

Individual publication links are in "Cisco Event Response: Semiannual Cisco IOS Software Security Advisory Bundled Publication" at the following link:

http://www.cisco.com/web/about/security/intelligence/Cisco_ERP_sep10.html

Affected Products

Vulnerable Products +------------------

Devices running affected versions of Cisco IOS Software are vulnerable if configured with SSL VPN and HTTP port redirection.

The following methods may be used to confirm if the device is configured for Cisco IOS SSL VPNs and is vulnerable:

If the output from show running-config | include webvpn contains "webvpn gateway " then the device is supporting the Cisco IOS SSL VPN feature. A device is vulnerable if it has the inservice command in at least one of the "webvpn gateway" sections and is configured for HTTP port redirection. The following example shows a vulnerable device configured with Cisco IOS SSL VPN:

Router#show running | section webvpn
webvpn gateway Gateway
 ip address 10.1.1.1 port 443
 http-redirect port 80
 ssl trustpoint Gateway-TP
 inservice
 !
Router#

A device that supports the Cisco IOS SSL VPN is not vulnerable if "webvpn gateway" is not configured.

To determine the Cisco IOS Software release that is running on a Cisco product, administrators can log in to the device and issue the show version command to display the system banner. The system banner confirms that the device is running Cisco IOS Software by displaying text similar to "Cisco Internetwork Operating System Software" or "Cisco IOS Software." The image name displays in parentheses, followed by "Version" and the Cisco IOS Software release name. Other Cisco devices do not have the show version command or may provide different output.

The following example identifies a Cisco product that is running Cisco IOS Software Release 12.4(20)T with an installed image name of C2800NM-ADVSECURITYK9-M:

Router#show version
Cisco IOS Software, 2800 Software (C2800NM-ADVSECURITYK9-M), Version 12.4(20)T, RELEASE SOFTWARE (fc3)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2008 by Cisco Systems, Inc. 
Compiled Thu 10-Jul-08 22:00 by prod_rel_team

! --- output truncated

Additional information about Cisco IOS Software release naming conventions is available in "White Paper: Cisco IOS Reference Guide" at the following link: http://www.cisco.com/warp/public/620/1.html

Products Confirmed Not Vulnerable +--------------------------------

The following products are not affected by this vulnerability:

Cisco ASA 5500 Series Adaptive Security Appliances
Cisco IOS XR Software
Cisco IOS XE Software

No other Cisco products are currently known to be affected by this vulnerability.

Details

The Cisco IOS SSL VPN feature provides remote access to enterprise sites to users anywhere on the Internet. The SSL VPN provides users with secure access to specific enterprise applications, such as e-mail and web browsing, without requiring them to have VPN client software installed on their end-user devices. Authentication is not required to exploit this vulnerability.

A complete TCP 3-way handshake is required to exploit this vulnerability. The memory leak can be detected by running the command show tcp brief as shown in the following example:

Router#show tcp brief
TCB       Local Address      Foreign Address     (state)
468BBDC0  192.168.0.22.80   192.168.0.33.19794   CLOSEWAIT
482D4730  192.168.0.22.80   192.168.0.33.22092   CLOSEWAIT
482779A4  192.168.0.22.80   192.168.0.33.16978   CLOSEWAIT
4693DEBC  192.168.0.22.80   192.168.0.33.21580   CLOSEWAIT
482D3418  192.168.0.22.80   192.168.0.33.17244   CLOSEWAIT
482B8ACC  192.168.0.22.80   192.168.0.33.16564   CLOSEWAIT
46954EB0  192.168.0.22.80   192.168.0.33.19532   CLOSEWAIT
468BA9B8  192.168.0.22.80   192.168.0.33.15781   CLOSEWAIT
482908C4  192.168.0.22.80   192.168.0.33.19275   CLOSEWAIT
4829D66C  192.168.0.22.80   192.168.0.33.19314   CLOSEWAIT
468A2D94  192.168.0.22.80   192.168.0.33.14736   CLOSEWAIT
4688F590  192.168.0.22.80   192.168.0.33.18786   CLOSEWAIT
4693CBA4  192.168.0.22.80   192.168.0.33.12176   CLOSEWAIT
4829ABC4  192.168.0.22.80   192.168.0.33.39629   CLOSEWAIT
4691206C  192.168.0.22.80   192.168.0.33.17818   CLOSEWAIT
46868224  192.168.0.22.80   192.168.0.33.16774   CLOSEWAIT
4832BFAC  192.168.0.22.80   192.168.0.33.39883   CLOSEWAIT
482D10CC  192.168.0.22.80   192.168.0.33.13677   CLOSEWAIT
4829B120  192.168.0.22.80   192.168.0.33.20870   CLOSEWAIT
482862FC  192.168.0.22.80   192.168.0.33.17035   CLOSEWAIT
482EC13C  192.168.0.22.80   192.168.0.33.16053   CLOSEWAIT
482901D8  192.168.0.22.80   192.168.0.33.16200   CLOSEWAIT

In the output above, the Transmission Control Blocks (TCBs) in the state CLOSEWAIT will not transition and represent a memory leak. Note that only TCP connections with a local TCP port of 80 (the well-known port for HTTP), as evidenced in the above example by a Local Address of 192.168.0.22.80, are relevant.

This vulnerability is documented in Cisco bug ID CSCtg21685 and Common Vulnerabilities and Exposures (CVE) identifier CVE-2010-2836 has been assigned to this vulnerability.

Vulnerability Scoring Details

Cisco has provided scores for the vulnerability in this advisory based on the Common Vulnerability Scoring System (CVSS). The CVSS scoring in this Security Advisory is done in accordance with CVSS version 2.0.

CVSS is a standards-based scoring method that conveys vulnerability severity and helps determine urgency and priority of response.

Cisco has provided a base and temporal score. Customers can then compute environmental scores to assist in determining the impact of the vulnerability in individual networks.

Cisco has provided an FAQ to answer additional questions regarding CVSS at

http://www.cisco.com/web/about/security/intelligence/cvss-qandas.html

Cisco has also provided a CVSS calculator to help compute the environmental impact for individual networks at

http://intellishield.cisco.com/security/alertmanager/cvss

CSCtg21685 - SSLVPN : TCP remains stuck in closewait state

CVSS Base Score - 7.8 Access Vector Network Access Complexity Low Authentication None Confidentiality Impact None Integrity Impact None Availability Impact Complete

CVSS Temporal Score - 6.4 Exploitability Functional Remediation Level Official Fix Report Confidence Confirmed

Impact

Successful exploitation of the vulnerability may result in a lack of available memory resources on the affected device, which could affect new connections to the device such as SSH and Telnet connections. Depletion of memory resources may also result in failing of routing protocols and other services.

Software Versions and Fixes

When considering software upgrades, also consult http://www.cisco.com/go/psirt and any subsequent advisories to determine exposure and a complete upgrade solution.

In all cases, customers should exercise caution to be certain the devices to be upgraded contain sufficient memory and that current hardware and software configurations will continue to be supported properly by the new release. If the information is not clear, contact the Cisco Technical Assistance Center (TAC) or your contracted maintenance provider for assistance.

Each row of the following Cisco IOS Software table corresponds to a Cisco IOS Software train. If a particular train is vulnerable, the earliest releases that contain the fix are listed in the First Fixed Release For This Advisory column. The First Fixed Release for All Advisories in the September 2010 Bundle Publication column lists the earliest possible releases that correct all the published vulnerabilities in the Cisco IOS Software Security Advisory bundled publication. Cisco recommends upgrading to the latest available release, where possible.

+-------------------------------------------------------------------+ | Major | Availability of Repaired Releases | | Release | | |------------+------------------------------------------------------| | Affected | First Fixed Release | First Fixed Release for All | | 12.0-Based | for This Advisory | Advisories in the September | | Releases | | 2010 Bundle Publication | |-------------------------------------------------------------------| | There are no affected 12.0 based releases | |-------------------------------------------------------------------| | Affected | First Fixed Release | First Fixed Release for All | | 12.1-Based | for This Advisory | Advisories in the September | | Releases | | 2010 Bundle Publication | |-------------------------------------------------------------------| | There are no affected 12.1 based releases | |-------------------------------------------------------------------| | Affected | First Fixed Release | First Fixed Release for All | | 12.2-Based | for This Advisory | Advisories in the September | | Releases | | 2010 Bundle Publication | |-------------------------------------------------------------------| | There are no affected 12.2 based releases | |-------------------------------------------------------------------| | Affected | First Fixed Release | First Fixed Release for All | | 12.3-Based | for This Advisory | Advisories in the September | | Releases | | 2010 Bundle Publication | |-------------------------------------------------------------------| | There are no affected 12.3 based releases | |-------------------------------------------------------------------| | Affected | First Fixed Release | First Fixed Release for All | | 12.4-Based | for This Advisory | Advisories in the September | | Releases | | 2010 Bundle Publication | |------------+----------------------+-------------------------------| | 12.4 | Not Vulnerable | 12.4(25d) | |------------+----------------------+-------------------------------| | 12.4GC | Not Vulnerable | 12.4(24)GC2 | |------------+----------------------+-------------------------------| | 12.4JA | Not Vulnerable | Not Vulnerable | |------------+----------------------+-------------------------------| | 12.4JDA | Not Vulnerable | Not Vulnerable | |------------+----------------------+-------------------------------| | 12.4JDC | Not Vulnerable | Not Vulnerable | |------------+----------------------+-------------------------------| | 12.4JDD | Not Vulnerable | Not Vulnerable | |------------+----------------------+-------------------------------| | 12.4JHA | Not Vulnerable | Not Vulnerable | |------------+----------------------+-------------------------------| | 12.4JHB | Not Vulnerable | Not Vulnerable | |------------+----------------------+-------------------------------| | 12.4JK | Not Vulnerable | Not Vulnerable | |------------+----------------------+-------------------------------| | 12.4JL | Not Vulnerable | Not Vulnerable | |------------+----------------------+-------------------------------| | 12.4JMA | Not Vulnerable | Not Vulnerable | |------------+----------------------+-------------------------------| | 12.4JMB | Not Vulnerable | Not Vulnerable | |------------+----------------------+-------------------------------| | 12.4JX | Not Vulnerable | Not Vulnerable | |------------+----------------------+-------------------------------| | 12.4JY | Not Vulnerable | Not Vulnerable | |------------+----------------------+-------------------------------| | 12.4MD | Not Vulnerable | 12.4(24)MD2 | |------------+----------------------+-------------------------------| | | | 12.4(22)MDA4 | | 12.4MDA | Not Vulnerable | | | | | 12.4(24)MDA1 | |------------+----------------------+-------------------------------| | 12.4MR | Not Vulnerable | Vulnerable; first fixed in | | | | 12.4MRA | |------------+----------------------+-------------------------------| | 12.4MRA | Not Vulnerable | 12.4(20)MRA1 | |------------+----------------------+-------------------------------| | 12.4SW | Not Vulnerable | Vulnerable; first fixed in | | | | 12.4T | |------------+----------------------+-------------------------------| | | Releases Prior to | | | | 12.4(15)T13 are not | | | | vulnerable. First | | | | fixed 12.4(15)T14 | | | | | 12.4(15)T14 | | | Releases Prior to | | | 12.4T | 12.4(20)T5 are not | 12.4(20)T6 | | | vulnerable. First | | | | fixed 12.4(20)T6 | 12.4(24)T4 | | | | | | | Releases Prior to | | | | 12.4(24)T2 are not | | | | vulnerable. First | | | | fixed 12.4(24)T4 | | |------------+----------------------+-------------------------------| | 12.4XA | Not Vulnerable | Vulnerable; first fixed in | | | | 12.4T | |------------+----------------------+-------------------------------| | 12.4XB | Not Vulnerable | Vulnerable; first fixed in | | | | 12.4T | |------------+----------------------+-------------------------------| | 12.4XC | Not Vulnerable | Vulnerable; first fixed in | | | | 12.4T | |------------+----------------------+-------------------------------| | 12.4XD | Not Vulnerable | Vulnerable; first fixed in | | | | 12.4T | |------------+----------------------+-------------------------------| | | | Releases prior to 12.4(6)XE5 | | | | are vulnerable, release 12.4 | | 12.4XE | Not Vulnerable | (6)XE5 and later are not | | | | vulnerable; first fixed in | | | | 12.4T | |------------+----------------------+-------------------------------| | 12.4XF | Not Vulnerable | Vulnerable; first fixed in | | | | 12.4T | |------------+----------------------+-------------------------------| | 12.4XG | Not Vulnerable | Vulnerable; first fixed in | | | | 12.4T | |------------+----------------------+-------------------------------| | 12.4XJ | Not Vulnerable | Vulnerable; first fixed in | | | | 12.4T | |------------+----------------------+-------------------------------| | 12.4XK | Not Vulnerable | Vulnerable; first fixed in | | | | 12.4T | |------------+----------------------+-------------------------------| | | | Vulnerable; Contact your | | | | support organization per the | | 12.4XL | Not Vulnerable | instructions in Obtaining | | | | Fixed Software section of | | | | this advisory | |------------+----------------------+-------------------------------| | 12.4XM | Not Vulnerable | Vulnerable; first fixed in | | | | 12.4T | |------------+----------------------+-------------------------------| | | | Vulnerable; Contact your | | | | support organization per the | | 12.4XN | Not Vulnerable | instructions in Obtaining | | | | Fixed Software section of | | | | this advisory | |------------+----------------------+-------------------------------| | | | Vulnerable; Contact your | | | | support organization per the | | 12.4XP | Not Vulnerable | instructions in Obtaining | | | | Fixed Software section of | | | | this advisory | |------------+----------------------+-------------------------------| | 12.4XQ | Not Vulnerable | 12.4(15)XQ6; Available on | | | | 22-SEP-10 | |------------+----------------------+-------------------------------| | | | 12.4(15)XR9 | | 12.4XR | Not Vulnerable | | | | | 12.4(22)XR7 | |------------+----------------------+-------------------------------| | 12.4XT | Not Vulnerable | Vulnerable; first fixed in | | | | 12.4T | |------------+----------------------+-------------------------------| | | | Vulnerable; Contact your | | | | support organization per the | | 12.4XV | Not Vulnerable | instructions in Obtaining | | | | Fixed Software section of | | | | this advisory | |------------+----------------------+-------------------------------| | 12.4XW | Not Vulnerable | Vulnerable; first fixed in | | | | 12.4T | |------------+----------------------+-------------------------------| | 12.4XY | Not Vulnerable | Vulnerable; first fixed in | | | | 12.4T | |------------+----------------------+-------------------------------| | 12.4XZ | Not Vulnerable | Vulnerable; first fixed in | | | | 12.4T | |------------+----------------------+-------------------------------| | 12.4YA | Not Vulnerable | Vulnerable; first fixed in | | | | 12.4T | |------------+----------------------+-------------------------------| | | | Vulnerable; Contact your | | | | support organization per the | | 12.4YB | Not Vulnerable | instructions in Obtaining | | | | Fixed Software section of | | | | this advisory | |------------+----------------------+-------------------------------| | | | Vulnerable; Contact your | | | | support organization per the | | 12.4YD | Not Vulnerable | instructions in Obtaining | | | | Fixed Software section of | | | | this advisory | |------------+----------------------+-------------------------------| | 12.4YE | Not Vulnerable | 12.4(24)YE1 | |------------+----------------------+-------------------------------| | 12.4YG | Not Vulnerable | 12.4(24)YG3 | |------------+----------------------+-------------------------------| | Affected | First Fixed Release | First Fixed Release for All | | 15.0-Based | for This Advisory | Advisories in the September | | Releases | | 2010 Bundle Publication | |------------+----------------------+-------------------------------| | 15.0M | 15.0(1)M3 | 15.0(1)M3 | |------------+----------------------+-------------------------------| | | Cisco 7600 and 10000 | Cisco 7600 and 10000 Series | | | Series routers: Not | routers: 15.0(1)S1 (available | | | vulnerable | early October 2010) | | 15.0S | | | | | Please see Cisco | Please see Cisco IOS-XE | | | IOS-XE Software | Software Availability | | | Availability | | |------------+----------------------+-------------------------------| | 15.0XA | Not Vulnerable | Vulnerable; first fixed in | | | | 15.1T | |------------+----------------------+-------------------------------| | 15.0XO | Not Vulnerable | Not Vulnerable | |------------+----------------------+-------------------------------| | Affected | First Fixed Release | First Fixed Release for All | | 15.1-Based | for This Advisory | Advisories in the September | | Releases | | 2010 Bundle Publication | |------------+----------------------+-------------------------------| | | 15.1(1)T1 | | | 15.1T | | 15.1(2)T1 | | | 15.1(2)T0a | | |------------+----------------------+-------------------------------| | | Vulnerability | Vulnerable; first fixed in | | 15.1XB | limited to 15.1(1) | 15.1T | | | XB1. | | +-------------------------------------------------------------------+

Cisco IOS XE Software +--------------------

+-------------------------------------------------------------------+ | Cisco IOS | First Fixed | First Fixed Release for All | | XE | Release for This | Advisories in the September 2010 | | Release | Advisory | Bundle Publication | |-----------+------------------+------------------------------------| | 2.1.x | Not Vulnerable | Not Vulnerable | |-----------+------------------+------------------------------------| | 2.2.x | Not Vulnerable | Not Vulnerable | |-----------+------------------+------------------------------------| | 2.3.x | Not Vulnerable | Not Vulnerable | |-----------+------------------+------------------------------------| | 2.4.x | Not Vulnerable | Not Vulnerable | |-----------+------------------+------------------------------------| | 2.5.x | Not Vulnerable | Vulnerable; migrate to 2.6.2 or | | | | later | |-----------+------------------+------------------------------------| | 2.6.x | Not Vulnerable | 2.6.2 | |-----------+------------------+------------------------------------| | 3.1.xS | Not Vulnerable | Not Vulnerable | +-------------------------------------------------------------------+

For mapping of Cisco IOS XE Software to Cisco IOS Software releases, please refer to the Cisco IOS XE 2 and Cisco IOS XE 3S Release Notes.

Cisco IOS XR System Software +---------------------------

Cisco IOS XR Software is not affected by the vulnerabilities disclosed in the September 22, 2010, Cisco IOS Software Security Advisory bundled publication.

Workarounds

Disabling HTTP redirection for SSL VPN connections can be used as a workaround for this vulnerability. HTTP redirection for SSL VPN connections is disabled by executing the command no http-redirect port in webvpn gateway configuration mode.

In addition, manually clearing the hung TCBs with the command clear tcp tcb * will transition the TCBs into a CLOSED state. After a time they will clear the CLOSED state and the memory will be released.

Note: Clearing the TCB will clear both legitimate and hung connections, including remote connections to the device such as Telnet and SSH connections.

The Cisco Applied Mitigation Bulletin (AMB) "Identifying and Mitigating Exploitation of the TCP State Manipulation Denial of Service Vulnerabilities in Multiple Cisco Products", available at http://www.cisco.com/warp/public/707/cisco-amb-20090908-tcp24.shtml, contains two mitigations (EEM scripts and SNMP) that can be used to detect and clear hung TCP connections.

Embedded Event Manager (EEM) +---------------------------

A Cisco IOS Embedded Event Manager (EEM) policy that is based on Tool Command Language (Tcl) can be used on vulnerable Cisco IOS devices to identify and detect a hung, extended, or indefinite TCP connection that is caused by this vulnerability. The policy allows administrators to monitor TCP connections on a Cisco IOS device. When Cisco IOS EEM detects potential exploitation of this vulnerability, the policy can trigger a response by sending a syslog message or a Simple Network Management Protocol (SNMP) trap to clear the TCP connection. The example policy provided in this document is based on a Tcl script that monitors and parses the output from two commands at defined intervals, produces a syslog message when the monitor threshold reaches its configured value, and can reset the TCP connection.

The Tcl script is available for download at the "Cisco Beyond: Embedded Event Manager (EEM) Scripting Community" at the following link: http://forums.cisco.com/eforum/servlet/EEM?page=eem&fn=script&scriptId=2041 A sample device configuration is provided below.

    !
    !-- Location where the Tcl script will be stored
    !

    event manager directory user policy disk0:/eem

    !
    !-- Define variable and set the monitoring interval
    !-- as an integer (expressed in seconds)
    !

    event manager environment EEM_MONITOR_INTERVAL 60

    !
    !-- Define variable and set the threshold value as
    !-- an integer for the number of retransmissions
    !-- that determine if the TCP connection is hung
    !-- (a recommended value to use is 15)
    !

    event manager environment EEM_MONITOR_THRESHOLD 15

    !
    !-- Define variable and set the value to "yes" to
    !-- enable the clearing of hung TCP connections
    !

    event manager environment EEM_MONITOR_CLEAR yes

    !
    !-- Define variable and set to the TCP connection
    !-- state or states that script will monitor, which
    !-- can be a single state or a space-separated list
    !-- of states
    !

    event manager environment EEM_MONITOR_STATES CLOSEWAIT

    !
    !-- Register the script as a Cisco EEM policy
    !

    event manager policy monitor-sockets.tcl

    !

For more details, refer to the sections "EEM Detecting And Clearing Hung TCP Connection" and "Identification: Detecting and Clearing Hung TCP Connection Using SNMP" of this AMB at the following link: http://www.cisco.com/warp/public/707/cisco-amb-20090908-tcp24.shtml

Obtaining Fixed Software

Cisco has released free software updates that address these vulnerabilities. Prior to deploying software, customers should consult their maintenance provider or check the software for feature set compatibility and known issues specific to their environment.

Customers may only install and expect support for the feature sets they have purchased. By installing, downloading, accessing or otherwise using such software upgrades, customers agree to be bound by the terms of Cisco's software license terms found at http://www.cisco.com/en/US/docs/general/warranty/English/EU1KEN_.html or as otherwise set forth at Cisco.com Downloads at http://www.cisco.com/public/sw-center/sw-usingswc.shtml

Do not contact psirt@cisco.com or security-alert@cisco.com for software upgrades.

Customers with Service Contracts +-------------------------------

Customers with contracts should obtain upgraded software through their regular update channels. For most customers, this means that upgrades should be obtained through the Software Center on Cisco's worldwide website at http://www.cisco.com

Customers using Third Party Support Organizations +------------------------------------------------

Customers whose Cisco products are provided or maintained through prior or existing agreements with third-party support organizations, such as Cisco Partners, authorized resellers, or service providers should contact that support organization for guidance and assistance with the appropriate course of action in regards to this advisory.

The effectiveness of any workaround or fix is dependent on specific customer situations, such as product mix, network topology, traffic behavior, and organizational mission. Due to the variety of affected products and releases, customers should consult with their service provider or support organization to ensure any applied workaround or fix is the most appropriate for use in the intended network before it is deployed.

Customers without Service Contracts +----------------------------------

Customers who purchase direct from Cisco but do not hold a Cisco service contract, and customers who purchase through third-party vendors but are unsuccessful in obtaining fixed software through their point of sale should acquire upgrades by contacting the Cisco Technical Assistance Center (TAC). TAC contacts are as follows.

+1 800 553 2447 (toll free from within North America)
+1 408 526 7209 (toll call from anywhere in the world)
e-mail: tac@cisco.com

Customers should have their product serial number available and be prepared to give the URL of this notice as evidence of entitlement to a free upgrade. Free upgrades for non-contract customers must be requested through the TAC.

Refer to http://www.cisco.com/en/US/support/tsd_cisco_worldwide_contacts.html for additional TAC contact information, including localized telephone numbers, and instructions and e-mail addresses for use in various languages.

Exploitation and Public Announcements

The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerability described in this advisory.

This vulnerability was found during the troubleshooting of a customer service request.

Status of this Notice: FINAL

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES THE RIGHT TO CHANGE OR UPDATE THIS DOCUMENT AT ANY TIME.

A stand-alone copy or Paraphrase of the text of this document that omits the distribution URL in the following section is an uncontrolled copy, and may lack important information or contain factual errors.

Distribution

This advisory is posted on Cisco's worldwide website at :

http://www.cisco.com/warp/public/707/cisco-sa-20100922-sslvpn.shtml

In addition to worldwide web posting, a text version of this notice is clear-signed with the Cisco PSIRT PGP key and is posted to the following e-mail and Usenet news recipients.

cust-security-announce@cisco.com
first-bulletins@lists.first.org
bugtraq@securityfocus.com
vulnwatch@vulnwatch.org
cisco@spot.colorado.edu
cisco-nsp@puck.nether.net
full-disclosure@lists.grok.org.uk
comp.dcom.sys.cisco@newsgate.cisco.com

Future updates of this advisory, if any, will be placed on Cisco's worldwide website, but may or may not be actively announced on mailing lists or newsgroups. Users concerned about this problem are encouraged to check the above URL for any updates.

Revision History

Cisco Security Procedures

Complete information on reporting security vulnerabilities in Cisco products, obtaining assistance with security incidents, and registering to receive security information from Cisco, is available on Cisco's worldwide website at http://www.cisco.com/en/US/products/products_security_vulnerability_policy.html This includes instructions for press inquiries regarding Cisco security notices. All Cisco security advisories are available at http://www.cisco.com/go/psirt -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (Darwin)

iEYEARECAAYFAkyZ/SwACgkQ86n/Gc8U/uBPYgCeOBY4HQKl1sgyp7mu9zl98VNK w84AoIVgVbW4s5KylgyKFiRAxFVUkiSZ =eC+N -----END PGP SIGNATURE-----

Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/

Show details on source website

JSON

To clipboard

{
  "@context": {
    "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
    "affected_products": {
      "@id": "https://www.variotdbs.pl/ref/affected_products"
    },
    "configurations": {
      "@id": "https://www.variotdbs.pl/ref/configurations"
    },
    "credits": {
      "@id": "https://www.variotdbs.pl/ref/credits"
    },
    "cvss": {
      "@id": "https://www.variotdbs.pl/ref/cvss/"
    },
    "description": {
      "@id": "https://www.variotdbs.pl/ref/description/"
    },
    "exploit_availability": {
      "@id": "https://www.variotdbs.pl/ref/exploit_availability/"
    },
    "external_ids": {
      "@id": "https://www.variotdbs.pl/ref/external_ids/"
    },
    "iot": {
      "@id": "https://www.variotdbs.pl/ref/iot/"
    },
    "iot_taxonomy": {
      "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
    },
    "patch": {
      "@id": "https://www.variotdbs.pl/ref/patch/"
    },
    "problemtype_data": {
      "@id": "https://www.variotdbs.pl/ref/problemtype_data/"
    },
    "references": {
      "@id": "https://www.variotdbs.pl/ref/references/"
    },
    "sources": {
      "@id": "https://www.variotdbs.pl/ref/sources/"
    },
    "sources_release_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_release_date/"
    },
    "sources_update_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_update_date/"
    },
    "threat_type": {
      "@id": "https://www.variotdbs.pl/ref/threat_type/"
    },
    "title": {
      "@id": "https://www.variotdbs.pl/ref/title/"
    },
    "type": {
      "@id": "https://www.variotdbs.pl/ref/type/"
    }
  },
  "@id": "https://www.variotdbs.pl/vuln/VAR-201009-0063",
  "affected_products": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/affected_products#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "model": "ios",
        "scope": "eq",
        "trust": 1.8,
        "vendor": "cisco",
        "version": "12.4"
      },
      {
        "model": "ios",
        "scope": "eq",
        "trust": 1.6,
        "vendor": "cisco",
        "version": "15.1t"
      },
      {
        "model": "ios",
        "scope": "eq",
        "trust": 1.6,
        "vendor": "cisco",
        "version": "15.0xa"
      },
      {
        "model": "ios",
        "scope": "eq",
        "trust": 1.6,
        "vendor": "cisco",
        "version": "12.4xy"
      },
      {
        "model": "ios",
        "scope": "eq",
        "trust": 1.6,
        "vendor": "cisco",
        "version": "12.4xz"
      },
      {
        "model": "ios",
        "scope": "eq",
        "trust": 1.6,
        "vendor": "cisco",
        "version": "15.1\\(1\\)xb1"
      },
      {
        "model": "ios",
        "scope": "eq",
        "trust": 1.6,
        "vendor": "cisco",
        "version": "15.0m"
      },
      {
        "model": "ios",
        "scope": "eq",
        "trust": 1.6,
        "vendor": "cisco",
        "version": "12.4ya"
      },
      {
        "model": "ios",
        "scope": "eq",
        "trust": 1.6,
        "vendor": "cisco",
        "version": "12.4yb"
      },
      {
        "model": "ios",
        "scope": "eq",
        "trust": 1.6,
        "vendor": "cisco",
        "version": "12.4yd"
      },
      {
        "model": "ios",
        "scope": "eq",
        "trust": 1.6,
        "vendor": "cisco",
        "version": "12.4xw"
      },
      {
        "model": "ios",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "12.4xe"
      },
      {
        "model": "ios",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "12.4xc"
      },
      {
        "model": "ios",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "12.4xm"
      },
      {
        "model": "ios",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "12.4gc"
      },
      {
        "model": "ios",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "12.4xd"
      },
      {
        "model": "ios",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "12.4xv"
      },
      {
        "model": "ios",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "12.4xa"
      },
      {
        "model": "ios",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "12.4xk"
      },
      {
        "model": "ios",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "12.4xn"
      },
      {
        "model": "ios",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "12.4xt"
      },
      {
        "model": "ios",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "12.4mda"
      },
      {
        "model": "ios",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "12.4xf"
      },
      {
        "model": "ios",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "12.4sw"
      },
      {
        "model": "ios",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "12.4xl"
      },
      {
        "model": "ios",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "12.4xg"
      },
      {
        "model": "ios",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "12.4xj"
      },
      {
        "model": "ios",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "12.4mra"
      },
      {
        "model": "ios",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "12.4xp"
      },
      {
        "model": "ios",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "12.4mr"
      },
      {
        "model": "ios",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "12.4xb"
      },
      {
        "model": "ios",
        "scope": "eq",
        "trust": 0.8,
        "vendor": "cisco",
        "version": "15.0"
      },
      {
        "model": "ios",
        "scope": "eq",
        "trust": 0.8,
        "vendor": "cisco",
        "version": "15.1"
      },
      {
        "model": "ios 12.4 t14",
        "scope": "ne",
        "trust": 0.3,
        "vendor": "cisco",
        "version": null
      },
      {
        "model": "ios 15.1 t1",
        "scope": "ne",
        "trust": 0.3,
        "vendor": "cisco",
        "version": null
      },
      {
        "model": "ios 15.1 t0a",
        "scope": "ne",
        "trust": 0.3,
        "vendor": "cisco",
        "version": null
      },
      {
        "model": "ios 12.4t",
        "scope": null,
        "trust": 0.3,
        "vendor": "cisco",
        "version": null
      },
      {
        "model": "ios 15.0m",
        "scope": null,
        "trust": 0.3,
        "vendor": "cisco",
        "version": null
      },
      {
        "model": "ios 15.1t",
        "scope": null,
        "trust": 0.3,
        "vendor": "cisco",
        "version": null
      },
      {
        "model": "ios 12.4 t6",
        "scope": "ne",
        "trust": 0.3,
        "vendor": "cisco",
        "version": null
      },
      {
        "model": "ios 15.0 m3",
        "scope": "ne",
        "trust": 0.3,
        "vendor": "cisco",
        "version": null
      },
      {
        "model": "ios 12.4 t4",
        "scope": "ne",
        "trust": 0.3,
        "vendor": "cisco",
        "version": null
      }
    ],
    "sources": [
      {
        "db": "BID",
        "id": "43390"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2010-002128"
      },
      {
        "db": "NVD",
        "id": "CVE-2010-2836"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201009-246"
      }
    ]
  },
  "configurations": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/configurations#",
      "children": {
        "@container": "@list"
      },
      "cpe_match": {
        "@container": "@list"
      },
      "data": {
        "@container": "@list"
      },
      "nodes": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:o:cisco:ios:12.4mr:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:cisco:ios:12.4:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:cisco:ios:12.4gc:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:cisco:ios:12.4mda:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:cisco:ios:12.4xm:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:cisco:ios:12.4xn:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:cisco:ios:12.4xp:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:cisco:ios:12.4xt:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:cisco:ios:12.4sw:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:cisco:ios:12.4xb:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:cisco:ios:12.4xg:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:cisco:ios:12.4xk:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:cisco:ios:12.4xw:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:cisco:ios:12.4xz:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:cisco:ios:15.1\\(1\\)xb1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:cisco:ios:12.4xc:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:cisco:ios:12.4xd:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:cisco:ios:12.4xe:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:cisco:ios:12.4xf:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:cisco:ios:12.4yb:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:cisco:ios:12.4yd:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:cisco:ios:15.0m:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:cisco:ios:15.0xa:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:cisco:ios:12.4mra:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:cisco:ios:12.4xa:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:cisco:ios:12.4xj:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:cisco:ios:12.4xl:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:cisco:ios:12.4xv:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:cisco:ios:12.4xy:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:cisco:ios:12.4ya:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:cisco:ios:15.1t:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2010-2836"
      }
    ]
  },
  "credits": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/credits#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Cisco",
    "sources": [
      {
        "db": "BID",
        "id": "43390"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201009-246"
      }
    ],
    "trust": 0.9
  },
  "cve": "CVE-2010-2836",
  "cvss": {
    "@context": {
      "cvssV2": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
      },
      "cvssV3": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
      },
      "severity": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/cvss/severity#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/severity"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "cvssV2": [
          {
            "acInsufInfo": false,
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "NVD",
            "availabilityImpact": "COMPLETE",
            "baseScore": 7.8,
            "confidentialityImpact": "NONE",
            "exploitabilityScore": 10.0,
            "impactScore": 6.9,
            "integrityImpact": "NONE",
            "obtainAllPrivilege": false,
            "obtainOtherPrivilege": false,
            "obtainUserPrivilege": false,
            "severity": "HIGH",
            "trust": 1.0,
            "userInteractionRequired": false,
            "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "version": "2.0"
          },
          {
            "acInsufInfo": null,
            "accessComplexity": "Low",
            "accessVector": "Network",
            "authentication": "None",
            "author": "NVD",
            "availabilityImpact": "Complete",
            "baseScore": 7.8,
            "confidentialityImpact": "None",
            "exploitabilityScore": null,
            "id": "CVE-2010-2836",
            "impactScore": null,
            "integrityImpact": "None",
            "obtainAllPrivilege": null,
            "obtainOtherPrivilege": null,
            "obtainUserPrivilege": null,
            "severity": "High",
            "trust": 0.9,
            "userInteractionRequired": null,
            "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "version": "2.0"
          },
          {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "VULHUB",
            "availabilityImpact": "COMPLETE",
            "baseScore": 7.8,
            "confidentialityImpact": "NONE",
            "exploitabilityScore": 10.0,
            "id": "VHN-45441",
            "impactScore": 6.9,
            "integrityImpact": "NONE",
            "severity": "HIGH",
            "trust": 0.1,
            "vectorString": "AV:N/AC:L/AU:N/C:N/I:N/A:C",
            "version": "2.0"
          }
        ],
        "cvssV3": [],
        "severity": [
          {
            "author": "NVD",
            "id": "CVE-2010-2836",
            "trust": 1.8,
            "value": "HIGH"
          },
          {
            "author": "CNNVD",
            "id": "CNNVD-201009-246",
            "trust": 0.6,
            "value": "HIGH"
          },
          {
            "author": "VULHUB",
            "id": "VHN-45441",
            "trust": 0.1,
            "value": "HIGH"
          },
          {
            "author": "VULMON",
            "id": "CVE-2010-2836",
            "trust": 0.1,
            "value": "HIGH"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-45441"
      },
      {
        "db": "VULMON",
        "id": "CVE-2010-2836"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2010-002128"
      },
      {
        "db": "NVD",
        "id": "CVE-2010-2836"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201009-246"
      }
    ]
  },
  "description": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/description#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Memory leak in the SSL VPN feature in Cisco IOS 12.4, 15.0, and 15.1, when HTTP port redirection is enabled, allows remote attackers to cause a denial of service (memory consumption) by improperly disconnecting SSL sessions, leading to connections that remain in the CLOSE-WAIT state, aka Bug ID CSCtg21685. Cisco IOS is prone to a remote denial-of-service vulnerability. \nAn attacker can exploit this issue to cause an affected device to reload or to stop accepting new TCP connections, denying service to legitimate users. \nThis issue is tracked by Cisco Bug ID CSCtg21685. This vulnerability causes the connection to remain in the CLOSE-WAIT state. ----------------------------------------------------------------------\n\n\nWindows Applications Insecure Library Loading\n\nThe Official, Verified Secunia List:\nhttp://secunia.com/advisories/windows_insecure_library_loading/\n\nThe list is continuously updated as we confirm the vulnerability reports so check back regularly too see if any of your apps are affected. \n\n\n----------------------------------------------------------------------\n\nTITLE:\nCisco IOS SSL VPN Memory Leak Denial of Service Vulnerability\n\nSECUNIA ADVISORY ID:\nSA41552\n\nVERIFY ADVISORY:\nSecunia.com\nhttp://secunia.com/advisories/41552/\nCustomer Area (Credentials Required)\nhttps://ca.secunia.com/?page=viewadvisory\u0026vuln_id=41552\n\nRELEASE DATE:\n2010-09-24\n\nDISCUSS ADVISORY:\nhttp://secunia.com/advisories/41552/#comments\n\nAVAILABLE ON SITE AND IN CUSTOMER AREA:\n * Last Update\n * Popularity\n * Comments\n * Criticality Level\n * Impact\n * Where\n * Solution Status\n * Operating System / Software\n * CVE Reference(s)\n\nhttp://secunia.com/advisories/41552/\n\nONLY AVAILABLE IN CUSTOMER AREA:\n * Authentication Level\n * Report Reliability\n * Secunia PoC\n * Secunia Analysis\n * Systems Affected\n * Approve Distribution\n * Remediation Status\n * Secunia CVSS Score\n * CVSS\n\nhttps://ca.secunia.com/?page=viewadvisory\u0026vuln_id=41552\n\nONLY AVAILABLE WITH SECUNIA CSI AND SECUNIA PSI:\n * AUTOMATED SCANNING\n\nhttp://secunia.com/vulnerability_scanning/personal/\nhttp://secunia.com/vulnerability_scanning/corporate/wsus_sccm_3rd_third_party_patching/\n\nDESCRIPTION:\nA vulnerability has been reported in Cisco IOS, which can be\nexploited by malicious people to cause a DoS (Denial of Service). This can be\nexploited to exhaust available memory resources and e.g. \n\nSOLUTION:\nUpdate to a fixed version. \n\nPROVIDED AND/OR DISCOVERED BY:\nReported by the vendor. \n\nORIGINAL ADVISORY:\ncisco-sa-20100922-sslvpn:\nhttp://www.cisco.com/warp/public/707/cisco-sa-20100922-sslvpn.shtml\n\nOTHER REFERENCES:\nFurther details available in Customer Area:\nhttp://secunia.com/products/corporate/EVM/\n\nDEEP LINKS:\nFurther details available in Customer Area:\nhttp://secunia.com/products/corporate/EVM/\n\nEXTENDED DESCRIPTION:\nFurther details available in Customer Area:\nhttp://secunia.com/products/corporate/EVM/\n\nEXTENDED SOLUTION:\nFurther details available in Customer Area:\nhttp://secunia.com/products/corporate/EVM/\n\nEXPLOIT:\nFurther details available in Customer Area:\nhttp://secunia.com/products/corporate/EVM/\n\n----------------------------------------------------------------------\n\nAbout:\nThis Advisory was delivered by Secunia as a free service to help\nprivate users keeping their systems up to date against the latest\nvulnerabilities. \n\nSubscribe:\nhttp://secunia.com/advisories/secunia_security_advisories/\n\nDefinitions: (Criticality, Where etc.)\nhttp://secunia.com/advisories/about_secunia_advisories/\n\n\nPlease Note:\nSecunia recommends that you verify all advisories you receive by\nclicking the link. \nSecunia NEVER sends attached files with advisories. \nSecunia does not advise people to install third party patches, only\nuse those supplied by the vendor. \n\n----------------------------------------------------------------------\n\nUnsubscribe: Secunia Security Advisories\nhttp://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org\n\n----------------------------------------------------------------------\n\n\n. -----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA1\n\nCisco IOS SSL VPN Vulnerability\n\nAdvisory ID: cisco-sa-20100922-sslvpn\n\nhttp://www.cisco.com/warp/public/707/cisco-sa-20100922-sslvpn.shtml\n\nRevision 1.0\n\nFor Public Release 2010 September 22 1600 UTC (GMT)\n\n- ---------------------------------------------------------------------\n\nSummary\n=======\n\nCisco IOS  Software contains a vulnerability when the Cisco IOS SSL\nVPN feature is configured with an HTTP redirect. \n\nCisco has released free software updates that address this\nvulnerability. There is a workaround to mitigate this vulnerability. \n\nThis advisory is posted at \nhttp://www.cisco.com/warp/public/707/cisco-sa-20100922-sslvpn.shtml\n\nNote: The September 22, 2010, Cisco IOS Software Security Advisory\nbundled publication includes six Cisco Security Advisories. Five of\nthe advisories address vulnerabilities in Cisco IOS Software, and one\nadvisory addresses vulnerabilities in Cisco Unified Communications\nManager. Each advisory lists the releases that correct the\nvulnerability or vulnerabilities detailed in the advisory. The table\nat the following URL lists releases that correct all Cisco IOS\nSoftware vulnerabilities that have been published on September 22,\n2010, or earlier:\n\nhttp://www.cisco.com/warp/public/707/cisco-sa-20100922-bundle.shtml\n\nIndividual publication links are in \"Cisco Event Response: Semiannual\nCisco IOS Software Security Advisory Bundled Publication\" at the\nfollowing link:\n\nhttp://www.cisco.com/web/about/security/intelligence/Cisco_ERP_sep10.html\n\nAffected Products\n=================\n\nVulnerable Products\n+------------------\n\nDevices running affected versions of Cisco IOS Software are\nvulnerable if configured with SSL VPN and HTTP port redirection. \n\nThe following methods may be used to confirm if the device is\nconfigured for Cisco IOS SSL VPNs and is vulnerable:\n\nIf the output from show running-config | include webvpn contains\n\"webvpn gateway \u003cword\u003e\" then the device is supporting the Cisco IOS\nSSL VPN feature. A device is vulnerable if it has the inservice\ncommand in at least one of the \"webvpn gateway\" sections and is\nconfigured for HTTP port redirection. The following example shows a\nvulnerable device configured with Cisco IOS SSL VPN:\n\n    Router#show running | section webvpn\n    webvpn gateway Gateway\n     ip address 10.1.1.1 port 443\n     http-redirect port 80\n     ssl trustpoint Gateway-TP\n     inservice\n     !\n    Router#\n\nA device that supports the Cisco IOS SSL VPN is not vulnerable if\n\"webvpn gateway\" is not configured. \n\nTo determine the Cisco IOS Software release that is running on a\nCisco product, administrators can log in to the device and issue the\nshow version command to display the system banner. The system banner\nconfirms that the device is running Cisco IOS Software by displaying\ntext similar to \"Cisco Internetwork Operating System Software\" or\n\"Cisco IOS Software.\" The image name displays in parentheses,\nfollowed by \"Version\" and the Cisco IOS Software release name. Other\nCisco devices do not have the show version command or may provide\ndifferent output. \n\nThe following example identifies a Cisco product that is running\nCisco IOS Software Release 12.4(20)T with an installed image name of\nC2800NM-ADVSECURITYK9-M:\n\n    Router#show version\n    Cisco IOS Software, 2800 Software (C2800NM-ADVSECURITYK9-M), Version 12.4(20)T, RELEASE SOFTWARE (fc3)\n    Technical Support: http://www.cisco.com/techsupport\n    Copyright (c) 1986-2008 by Cisco Systems, Inc. \n    Compiled Thu 10-Jul-08 22:00 by prod_rel_team\n\n    ! --- output truncated\n\nAdditional information about Cisco IOS Software release naming\nconventions is available in \"White Paper: Cisco IOS Reference Guide\"\nat the following link: http://www.cisco.com/warp/public/620/1.html\n\nProducts Confirmed Not Vulnerable\n+--------------------------------\n\nThe following products are not affected by this vulnerability:\n\n  * Cisco ASA 5500 Series Adaptive Security Appliances\n  * Cisco IOS XR Software\n  * Cisco IOS XE Software\n\nNo other Cisco products are currently known to be affected by this\nvulnerability. \n\nDetails\n=======\n\nThe Cisco IOS SSL VPN feature provides remote access to enterprise\nsites to users anywhere on the Internet. The SSL VPN provides users\nwith secure access to specific enterprise applications, such as\ne-mail and web browsing, without requiring them to have VPN client\nsoftware installed on their end-user devices. Authentication is not required to exploit this\nvulnerability. \n\nA complete TCP 3-way handshake is required to exploit this\nvulnerability. The memory leak can be detected by running the command\nshow tcp brief as shown in the following example:\n\n    Router#show tcp brief\n    TCB       Local Address      Foreign Address     (state)\n    468BBDC0  192.168.0.22.80   192.168.0.33.19794   CLOSEWAIT\n    482D4730  192.168.0.22.80   192.168.0.33.22092   CLOSEWAIT\n    482779A4  192.168.0.22.80   192.168.0.33.16978   CLOSEWAIT\n    4693DEBC  192.168.0.22.80   192.168.0.33.21580   CLOSEWAIT\n    482D3418  192.168.0.22.80   192.168.0.33.17244   CLOSEWAIT\n    482B8ACC  192.168.0.22.80   192.168.0.33.16564   CLOSEWAIT\n    46954EB0  192.168.0.22.80   192.168.0.33.19532   CLOSEWAIT\n    468BA9B8  192.168.0.22.80   192.168.0.33.15781   CLOSEWAIT\n    482908C4  192.168.0.22.80   192.168.0.33.19275   CLOSEWAIT\n    4829D66C  192.168.0.22.80   192.168.0.33.19314   CLOSEWAIT\n    468A2D94  192.168.0.22.80   192.168.0.33.14736   CLOSEWAIT\n    4688F590  192.168.0.22.80   192.168.0.33.18786   CLOSEWAIT\n    4693CBA4  192.168.0.22.80   192.168.0.33.12176   CLOSEWAIT\n    4829ABC4  192.168.0.22.80   192.168.0.33.39629   CLOSEWAIT\n    4691206C  192.168.0.22.80   192.168.0.33.17818   CLOSEWAIT\n    46868224  192.168.0.22.80   192.168.0.33.16774   CLOSEWAIT\n    4832BFAC  192.168.0.22.80   192.168.0.33.39883   CLOSEWAIT\n    482D10CC  192.168.0.22.80   192.168.0.33.13677   CLOSEWAIT\n    4829B120  192.168.0.22.80   192.168.0.33.20870   CLOSEWAIT\n    482862FC  192.168.0.22.80   192.168.0.33.17035   CLOSEWAIT\n    482EC13C  192.168.0.22.80   192.168.0.33.16053   CLOSEWAIT\n    482901D8  192.168.0.22.80   192.168.0.33.16200   CLOSEWAIT\n\nIn the output above, the Transmission Control Blocks (TCBs) in the\nstate CLOSEWAIT will not transition and represent a memory leak. Note\nthat only TCP connections with a local TCP port of 80 (the well-known\nport for HTTP), as evidenced in the above example by a Local Address\nof 192.168.0.22.80, are relevant. \n\nThis vulnerability is documented in Cisco bug ID CSCtg21685 \nand Common Vulnerabilities and Exposures (CVE) identifier \nCVE-2010-2836 has been assigned to this vulnerability. \n\nVulnerability Scoring Details\n=============================\n\nCisco has provided scores for the vulnerability in this advisory\nbased on the Common Vulnerability Scoring System (CVSS). The CVSS\nscoring in this Security Advisory is done in accordance with CVSS\nversion 2.0. \n\nCVSS is a standards-based scoring method that conveys vulnerability\nseverity and helps determine urgency and priority of response. \n\nCisco has provided a base and temporal score. Customers can then\ncompute environmental scores to assist in determining the impact of\nthe vulnerability in individual networks. \n\nCisco has provided an FAQ to answer additional questions regarding\nCVSS at\n\nhttp://www.cisco.com/web/about/security/intelligence/cvss-qandas.html\n\nCisco has also provided a CVSS calculator to help compute the\nenvironmental impact for individual networks at\n\nhttp://intellishield.cisco.com/security/alertmanager/cvss\n\nCSCtg21685 - SSLVPN : TCP remains stuck in closewait state\n\nCVSS Base Score - 7.8\nAccess Vector           Network\nAccess Complexity       Low\nAuthentication          None\nConfidentiality Impact  None\nIntegrity Impact        None\nAvailability Impact     Complete\n\nCVSS Temporal Score - 6.4\nExploitability          Functional\nRemediation Level       Official Fix\nReport Confidence       Confirmed\n\nImpact\n======\n\nSuccessful exploitation of the vulnerability may result in a lack of\navailable memory resources on the affected device, which could affect\nnew connections to the device such as SSH and Telnet connections. \nDepletion of memory resources may also result in failing of routing\nprotocols and other services. \n\nSoftware Versions and Fixes\n===========================\n\nWhen considering software upgrades, also consult \nhttp://www.cisco.com/go/psirt and any subsequent advisories to \ndetermine exposure and a complete upgrade solution. \n\nIn all cases, customers should exercise caution to be certain the\ndevices to be upgraded contain sufficient memory and that current\nhardware and software configurations will continue to be supported\nproperly by the new release. If the information is not clear, contact\nthe Cisco Technical Assistance Center (TAC) or your contracted\nmaintenance provider for assistance. \n\nEach row of the following Cisco IOS Software table corresponds to a\nCisco IOS Software train. If a particular train is vulnerable, the\nearliest releases that contain the fix are listed in the First Fixed\nRelease For This Advisory column. The First Fixed Release for All\nAdvisories in the September 2010 Bundle Publication column lists the\nearliest possible releases that correct all the published\nvulnerabilities in the Cisco IOS Software Security Advisory bundled\npublication. Cisco recommends upgrading to the latest available\nrelease, where possible. \n\n+-------------------------------------------------------------------+\n|   Major    |             Availability of Repaired Releases        |\n|  Release   |                                                      |\n|------------+------------------------------------------------------|\n|  Affected  | First Fixed Release  |  First Fixed Release for All  |\n| 12.0-Based |  for This Advisory   |  Advisories in the September  |\n|  Releases  |                      |    2010 Bundle Publication    |\n|-------------------------------------------------------------------|\n| There are no affected 12.0 based releases                         |\n|-------------------------------------------------------------------|\n|  Affected  | First Fixed Release  |  First Fixed Release for All  |\n| 12.1-Based |  for This Advisory   |  Advisories in the September  |\n|  Releases  |                      |    2010 Bundle Publication    |\n|-------------------------------------------------------------------|\n| There are no affected 12.1 based releases                         |\n|-------------------------------------------------------------------|\n|  Affected  | First Fixed Release  |  First Fixed Release for All  |\n| 12.2-Based |  for This Advisory   |  Advisories in the September  |\n|  Releases  |                      |    2010 Bundle Publication    |\n|-------------------------------------------------------------------|\n| There are no affected 12.2 based releases                         |\n|-------------------------------------------------------------------|\n|  Affected  | First Fixed Release  |  First Fixed Release for All  |\n| 12.3-Based |  for This Advisory   |  Advisories in the September  |\n|  Releases  |                      |    2010 Bundle Publication    |\n|-------------------------------------------------------------------|\n| There are no affected 12.3 based releases                         |\n|-------------------------------------------------------------------|\n|  Affected  | First Fixed Release  |  First Fixed Release for All  |\n| 12.4-Based |  for This Advisory   |  Advisories in the September  |\n|  Releases  |                      |    2010 Bundle Publication    |\n|------------+----------------------+-------------------------------|\n| 12.4       | Not Vulnerable       | 12.4(25d)                     |\n|------------+----------------------+-------------------------------|\n| 12.4GC     | Not Vulnerable       | 12.4(24)GC2                   |\n|------------+----------------------+-------------------------------|\n| 12.4JA     | Not Vulnerable       | Not Vulnerable                |\n|------------+----------------------+-------------------------------|\n| 12.4JDA    | Not Vulnerable       | Not Vulnerable                |\n|------------+----------------------+-------------------------------|\n| 12.4JDC    | Not Vulnerable       | Not Vulnerable                |\n|------------+----------------------+-------------------------------|\n| 12.4JDD    | Not Vulnerable       | Not Vulnerable                |\n|------------+----------------------+-------------------------------|\n| 12.4JHA    | Not Vulnerable       | Not Vulnerable                |\n|------------+----------------------+-------------------------------|\n| 12.4JHB    | Not Vulnerable       | Not Vulnerable                |\n|------------+----------------------+-------------------------------|\n| 12.4JK     | Not Vulnerable       | Not Vulnerable                |\n|------------+----------------------+-------------------------------|\n| 12.4JL     | Not Vulnerable       | Not Vulnerable                |\n|------------+----------------------+-------------------------------|\n| 12.4JMA    | Not Vulnerable       | Not Vulnerable                |\n|------------+----------------------+-------------------------------|\n| 12.4JMB    | Not Vulnerable       | Not Vulnerable                |\n|------------+----------------------+-------------------------------|\n| 12.4JX     | Not Vulnerable       | Not Vulnerable                |\n|------------+----------------------+-------------------------------|\n| 12.4JY     | Not Vulnerable       | Not Vulnerable                |\n|------------+----------------------+-------------------------------|\n| 12.4MD     | Not Vulnerable       | 12.4(24)MD2                   |\n|------------+----------------------+-------------------------------|\n|            |                      | 12.4(22)MDA4                  |\n| 12.4MDA    | Not Vulnerable       |                               |\n|            |                      | 12.4(24)MDA1                  |\n|------------+----------------------+-------------------------------|\n| 12.4MR     | Not Vulnerable       | Vulnerable; first fixed in    |\n|            |                      | 12.4MRA                       |\n|------------+----------------------+-------------------------------|\n| 12.4MRA    | Not Vulnerable       | 12.4(20)MRA1                  |\n|------------+----------------------+-------------------------------|\n| 12.4SW     | Not Vulnerable       | Vulnerable; first fixed in    |\n|            |                      | 12.4T                         |\n|------------+----------------------+-------------------------------|\n|            | Releases Prior to    |                               |\n|            | 12.4(15)T13 are not  |                               |\n|            | vulnerable. First    |                               |\n|            | fixed 12.4(15)T14    |                               |\n|            |                      | 12.4(15)T14                   |\n|            | Releases Prior to    |                               |\n| 12.4T      | 12.4(20)T5 are not   | 12.4(20)T6                    |\n|            | vulnerable. First    |                               |\n|            | fixed 12.4(20)T6     | 12.4(24)T4                    |\n|            |                      |                               |\n|            | Releases Prior to    |                               |\n|            | 12.4(24)T2 are not   |                               |\n|            | vulnerable. First    |                               |\n|            | fixed 12.4(24)T4     |                               |\n|------------+----------------------+-------------------------------|\n| 12.4XA     | Not Vulnerable       | Vulnerable; first fixed in    |\n|            |                      | 12.4T                         |\n|------------+----------------------+-------------------------------|\n| 12.4XB     | Not Vulnerable       | Vulnerable; first fixed in    |\n|            |                      | 12.4T                         |\n|------------+----------------------+-------------------------------|\n| 12.4XC     | Not Vulnerable       | Vulnerable; first fixed in    |\n|            |                      | 12.4T                         |\n|------------+----------------------+-------------------------------|\n| 12.4XD     | Not Vulnerable       | Vulnerable; first fixed in    |\n|            |                      | 12.4T                         |\n|------------+----------------------+-------------------------------|\n|            |                      | Releases prior to 12.4(6)XE5  |\n|            |                      | are vulnerable, release 12.4  |\n| 12.4XE     | Not Vulnerable       | (6)XE5 and later are not      |\n|            |                      | vulnerable; first fixed in    |\n|            |                      | 12.4T                         |\n|------------+----------------------+-------------------------------|\n| 12.4XF     | Not Vulnerable       | Vulnerable; first fixed in    |\n|            |                      | 12.4T                         |\n|------------+----------------------+-------------------------------|\n| 12.4XG     | Not Vulnerable       | Vulnerable; first fixed in    |\n|            |                      | 12.4T                         |\n|------------+----------------------+-------------------------------|\n| 12.4XJ     | Not Vulnerable       | Vulnerable; first fixed in    |\n|            |                      | 12.4T                         |\n|------------+----------------------+-------------------------------|\n| 12.4XK     | Not Vulnerable       | Vulnerable; first fixed in    |\n|            |                      | 12.4T                         |\n|------------+----------------------+-------------------------------|\n|            |                      | Vulnerable; Contact your      |\n|            |                      | support organization per the  |\n| 12.4XL     | Not Vulnerable       | instructions in Obtaining     |\n|            |                      | Fixed Software section of     |\n|            |                      | this advisory                 |\n|------------+----------------------+-------------------------------|\n| 12.4XM     | Not Vulnerable       | Vulnerable; first fixed in    |\n|            |                      | 12.4T                         |\n|------------+----------------------+-------------------------------|\n|            |                      | Vulnerable; Contact your      |\n|            |                      | support organization per the  |\n| 12.4XN     | Not Vulnerable       | instructions in Obtaining     |\n|            |                      | Fixed Software section of     |\n|            |                      | this advisory                 |\n|------------+----------------------+-------------------------------|\n|            |                      | Vulnerable; Contact your      |\n|            |                      | support organization per the  |\n| 12.4XP     | Not Vulnerable       | instructions in Obtaining     |\n|            |                      | Fixed Software section of     |\n|            |                      | this advisory                 |\n|------------+----------------------+-------------------------------|\n| 12.4XQ     | Not Vulnerable       | 12.4(15)XQ6; Available on     |\n|            |                      | 22-SEP-10                     |\n|------------+----------------------+-------------------------------|\n|            |                      | 12.4(15)XR9                   |\n| 12.4XR     | Not Vulnerable       |                               |\n|            |                      | 12.4(22)XR7                   |\n|------------+----------------------+-------------------------------|\n| 12.4XT     | Not Vulnerable       | Vulnerable; first fixed in    |\n|            |                      | 12.4T                         |\n|------------+----------------------+-------------------------------|\n|            |                      | Vulnerable; Contact your      |\n|            |                      | support organization per the  |\n| 12.4XV     | Not Vulnerable       | instructions in Obtaining     |\n|            |                      | Fixed Software section of     |\n|            |                      | this advisory                 |\n|------------+----------------------+-------------------------------|\n| 12.4XW     | Not Vulnerable       | Vulnerable; first fixed in    |\n|            |                      | 12.4T                         |\n|------------+----------------------+-------------------------------|\n| 12.4XY     | Not Vulnerable       | Vulnerable; first fixed in    |\n|            |                      | 12.4T                         |\n|------------+----------------------+-------------------------------|\n| 12.4XZ     | Not Vulnerable       | Vulnerable; first fixed in    |\n|            |                      | 12.4T                         |\n|------------+----------------------+-------------------------------|\n| 12.4YA     | Not Vulnerable       | Vulnerable; first fixed in    |\n|            |                      | 12.4T                         |\n|------------+----------------------+-------------------------------|\n|            |                      | Vulnerable; Contact your      |\n|            |                      | support organization per the  |\n| 12.4YB     | Not Vulnerable       | instructions in Obtaining     |\n|            |                      | Fixed Software section of     |\n|            |                      | this advisory                 |\n|------------+----------------------+-------------------------------|\n|            |                      | Vulnerable; Contact your      |\n|            |                      | support organization per the  |\n| 12.4YD     | Not Vulnerable       | instructions in Obtaining     |\n|            |                      | Fixed Software section of     |\n|            |                      | this advisory                 |\n|------------+----------------------+-------------------------------|\n| 12.4YE     | Not Vulnerable       | 12.4(24)YE1                   |\n|------------+----------------------+-------------------------------|\n| 12.4YG     | Not Vulnerable       | 12.4(24)YG3                   |\n|------------+----------------------+-------------------------------|\n|  Affected  | First Fixed Release  |  First Fixed Release for All  |\n| 15.0-Based |  for This Advisory   |  Advisories in the September  |\n|  Releases  |                      |    2010 Bundle Publication    |\n|------------+----------------------+-------------------------------|\n| 15.0M      | 15.0(1)M3            | 15.0(1)M3                     |\n|------------+----------------------+-------------------------------|\n|            | Cisco 7600 and 10000 | Cisco 7600 and 10000 Series   |\n|            | Series routers: Not  | routers: 15.0(1)S1 (available |\n|            | vulnerable           | early October 2010)           |\n| 15.0S      |                      |                               |\n|            | Please see Cisco     | Please see Cisco IOS-XE       |\n|            | IOS-XE Software      | Software Availability         |\n|            | Availability         |                               |\n|------------+----------------------+-------------------------------|\n| 15.0XA     | Not Vulnerable       | Vulnerable; first fixed in    |\n|            |                      | 15.1T                         |\n|------------+----------------------+-------------------------------|\n| 15.0XO     | Not Vulnerable       | Not Vulnerable                |\n|------------+----------------------+-------------------------------|\n|  Affected  | First Fixed Release  |  First Fixed Release for All  |\n| 15.1-Based |  for This Advisory   |  Advisories in the September  |\n|  Releases  |                      |    2010 Bundle Publication    |\n|------------+----------------------+-------------------------------|\n|            | 15.1(1)T1            |                               |\n| 15.1T      |                      | 15.1(2)T1                     |\n|            | 15.1(2)T0a           |                               |\n|------------+----------------------+-------------------------------|\n|            | Vulnerability        | Vulnerable; first fixed in    |\n| 15.1XB     | limited to 15.1(1)   | 15.1T                         |\n|            | XB1.                 |                               |\n+-------------------------------------------------------------------+\n\nCisco IOS XE Software\n+--------------------\n\n+-------------------------------------------------------------------+\n| Cisco IOS |   First Fixed    |    First Fixed Release for All     |\n|    XE     | Release for This |  Advisories in the September 2010  |\n|  Release  |     Advisory     |         Bundle Publication         |\n|-----------+------------------+------------------------------------|\n| 2.1.x     | Not Vulnerable   | Not Vulnerable                     |\n|-----------+------------------+------------------------------------|\n| 2.2.x     | Not Vulnerable   | Not Vulnerable                     |\n|-----------+------------------+------------------------------------|\n| 2.3.x     | Not Vulnerable   | Not Vulnerable                     |\n|-----------+------------------+------------------------------------|\n| 2.4.x     | Not Vulnerable   | Not Vulnerable                     |\n|-----------+------------------+------------------------------------|\n| 2.5.x     | Not Vulnerable   | Vulnerable; migrate to 2.6.2 or    |\n|           |                  | later                              |\n|-----------+------------------+------------------------------------|\n| 2.6.x     | Not Vulnerable   | 2.6.2                              |\n|-----------+------------------+------------------------------------|\n| 3.1.xS    | Not Vulnerable   | Not Vulnerable                     |\n+-------------------------------------------------------------------+\n\nFor mapping of Cisco IOS XE Software to Cisco IOS Software releases,\nplease refer to the Cisco IOS XE 2 and Cisco IOS XE 3S Release Notes. \n\nCisco IOS XR System Software\n+---------------------------\n\nCisco IOS XR Software is not affected by the vulnerabilities\ndisclosed in the September 22, 2010, Cisco IOS Software Security\nAdvisory bundled publication. \n\nWorkarounds\n===========\n\nDisabling HTTP redirection for SSL VPN connections can be used as a\nworkaround for this vulnerability. HTTP redirection for SSL VPN\nconnections is disabled by executing the command no http-redirect\nport in webvpn gateway configuration mode. \n\nIn addition, manually clearing the hung TCBs with the command clear\ntcp tcb * will transition the TCBs into a CLOSED state. After a time\nthey will clear the CLOSED state and the memory will be released. \n\nNote:  Clearing the TCB will clear both legitimate and hung\nconnections, including remote connections to the device such as\nTelnet and SSH connections. \n\nThe Cisco Applied Mitigation Bulletin (AMB) \"Identifying and\nMitigating Exploitation of the TCP State Manipulation Denial of\nService Vulnerabilities in Multiple Cisco Products\", available at\nhttp://www.cisco.com/warp/public/707/cisco-amb-20090908-tcp24.shtml,\ncontains two mitigations (EEM scripts and SNMP) that can be used to\ndetect and clear hung TCP connections. \n\nEmbedded Event Manager (EEM)\n+---------------------------\n\nA Cisco IOS Embedded Event Manager (EEM) policy that is based on Tool\nCommand Language (Tcl) can be used on vulnerable Cisco IOS devices to\nidentify and detect a hung, extended, or indefinite TCP connection\nthat is caused by this vulnerability. The policy allows\nadministrators to monitor TCP connections on a Cisco IOS device. When\nCisco IOS EEM detects potential exploitation of this vulnerability,\nthe policy can trigger a response by sending a syslog message or a\nSimple Network Management Protocol (SNMP) trap to clear the TCP\nconnection. The example policy provided in this document is based on\na Tcl script that monitors and parses the output from two commands at\ndefined intervals, produces a syslog message when the monitor\nthreshold reaches its configured value, and can reset the TCP\nconnection. \n\nThe Tcl script is available for download at the \"Cisco Beyond:\nEmbedded Event Manager (EEM) Scripting Community\" at the following\nlink: http://forums.cisco.com/eforum/servlet/EEM?page=eem\u0026fn=script\u0026scriptId=2041\nA sample device configuration is provided below. \n\n\n        !\n        !-- Location where the Tcl script will be stored\n        !\n\n        event manager directory user policy disk0:/eem\n\n        !\n        !-- Define variable and set the monitoring interval\n        !-- as an integer (expressed in seconds)\n        !\n\n        event manager environment EEM_MONITOR_INTERVAL 60\n\n        !\n        !-- Define variable and set the threshold value as\n        !-- an integer for the number of retransmissions\n        !-- that determine if the TCP connection is hung\n        !-- (a recommended value to use is 15)\n        !\n\n        event manager environment EEM_MONITOR_THRESHOLD 15\n\n        !\n        !-- Define variable and set the value to \"yes\" to\n        !-- enable the clearing of hung TCP connections\n        !\n\n        event manager environment EEM_MONITOR_CLEAR yes\n\n        !\n        !-- Define variable and set to the TCP connection\n        !-- state or states that script will monitor, which\n        !-- can be a single state or a space-separated list\n        !-- of states\n        !\n\n        event manager environment EEM_MONITOR_STATES CLOSEWAIT\n\n        !\n        !-- Register the script as a Cisco EEM policy\n        !\n\n        event manager policy monitor-sockets.tcl\n\n        !\n\nFor more details, refer to the sections \"EEM Detecting And Clearing\nHung TCP Connection\" and \"Identification: Detecting and Clearing Hung\nTCP Connection Using SNMP\" of this AMB at the following link: \nhttp://www.cisco.com/warp/public/707/cisco-amb-20090908-tcp24.shtml\n\nObtaining Fixed Software\n========================\n\nCisco has released free software updates that address these\nvulnerabilities. Prior to deploying software, customers should\nconsult their maintenance provider or check the software for feature\nset compatibility and known issues specific to their environment. \n\nCustomers may only install and expect support for the feature sets\nthey have purchased. By installing, downloading, accessing or\notherwise using such software upgrades, customers agree to be bound\nby the terms of Cisco\u0027s software license terms found at \nhttp://www.cisco.com/en/US/docs/general/warranty/English/EU1KEN_.html\nor as otherwise set forth at Cisco.com Downloads at \nhttp://www.cisco.com/public/sw-center/sw-usingswc.shtml\n\nDo not contact psirt@cisco.com or security-alert@cisco.com for\nsoftware upgrades. \n\nCustomers with Service Contracts\n+-------------------------------\n\nCustomers with contracts should obtain upgraded software through\ntheir regular update channels. For most customers, this means that\nupgrades should be obtained through the Software Center on Cisco\u0027s\nworldwide website at http://www.cisco.com\n\nCustomers using Third Party Support Organizations\n+------------------------------------------------\n\nCustomers whose Cisco products are provided or maintained through\nprior or existing agreements with third-party support organizations,\nsuch as Cisco Partners, authorized resellers, or service providers\nshould contact that support organization for guidance and assistance\nwith the appropriate course of action in regards to this advisory. \n\nThe effectiveness of any workaround or fix is dependent on specific\ncustomer situations, such as product mix, network topology, traffic\nbehavior, and organizational mission. Due to the variety of affected\nproducts and releases, customers should consult with their service\nprovider or support organization to ensure any applied workaround or\nfix is the most appropriate for use in the intended network before it\nis deployed. \n\nCustomers without Service Contracts\n+----------------------------------\n\nCustomers who purchase direct from Cisco but do not hold a Cisco\nservice contract, and customers who purchase through third-party\nvendors but are unsuccessful in obtaining fixed software through\ntheir point of sale should acquire upgrades by contacting the Cisco\nTechnical Assistance Center (TAC). TAC contacts are as follows. \n\n  * +1 800 553 2447 (toll free from within North America)\n  * +1 408 526 7209 (toll call from anywhere in the world)\n  * e-mail: tac@cisco.com\n\nCustomers should have their product serial number available and be\nprepared to give the URL of this notice as evidence of entitlement to\na free upgrade. Free upgrades for non-contract customers must be\nrequested through the TAC. \n\nRefer to \nhttp://www.cisco.com/en/US/support/tsd_cisco_worldwide_contacts.html\nfor additional TAC contact information, including localized telephone \nnumbers, and instructions and e-mail addresses for use in various \nlanguages. \n\nExploitation and Public Announcements\n=====================================\n\nThe Cisco PSIRT is not aware of any public announcements or malicious\nuse of the vulnerability described in this advisory. \n\nThis vulnerability was found during the troubleshooting of a customer\nservice request. \n\nStatus of this Notice: FINAL\n============================\n\nTHIS DOCUMENT IS PROVIDED ON AN \"AS IS\" BASIS AND DOES NOT IMPLY ANY\nKIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF\nMERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE\nINFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS\nAT YOUR OWN RISK. CISCO RESERVES THE RIGHT TO CHANGE OR UPDATE THIS\nDOCUMENT AT ANY TIME. \n\nA stand-alone copy or Paraphrase of the text of this document that\nomits the distribution URL in the following section is an\nuncontrolled copy, and may lack important information or contain\nfactual errors. \n\nDistribution\n============\n\nThis advisory is posted on Cisco\u0027s worldwide website at :\n\nhttp://www.cisco.com/warp/public/707/cisco-sa-20100922-sslvpn.shtml\n\nIn addition to worldwide web posting, a text version of this notice\nis clear-signed with the Cisco PSIRT PGP key and is posted to the\nfollowing e-mail and Usenet news recipients. \n\n  * cust-security-announce@cisco.com\n  * first-bulletins@lists.first.org\n  * bugtraq@securityfocus.com\n  * vulnwatch@vulnwatch.org\n  * cisco@spot.colorado.edu\n  * cisco-nsp@puck.nether.net\n  * full-disclosure@lists.grok.org.uk\n  * comp.dcom.sys.cisco@newsgate.cisco.com\n\nFuture updates of this advisory, if any, will be placed on Cisco\u0027s\nworldwide website, but may or may not be actively announced on\nmailing lists or newsgroups. Users concerned about this problem are\nencouraged to check the above URL for any updates. \n\nRevision History\n================\n\n+-----------------------------------------+\n| Revision |                   | Initial  |\n| 1.0      | 2010-September-22 | public   |\n|          |                   | release. |\n+-----------------------------------------+\n\nCisco Security Procedures\n=========================\n\nComplete information on reporting security vulnerabilities in Cisco\nproducts, obtaining assistance with security incidents, and\nregistering to receive security information from Cisco, is available\non Cisco\u0027s worldwide website at \nhttp://www.cisco.com/en/US/products/products_security_vulnerability_policy.html\nThis includes instructions for press inquiries regarding Cisco \nsecurity notices. All Cisco security advisories are available at \nhttp://www.cisco.com/go/psirt\n-----BEGIN PGP SIGNATURE-----\nVersion: GnuPG v1.4.10 (Darwin)\n\niEYEARECAAYFAkyZ/SwACgkQ86n/Gc8U/uBPYgCeOBY4HQKl1sgyp7mu9zl98VNK\nw84AoIVgVbW4s5KylgyKFiRAxFVUkiSZ\n=eC+N\n-----END PGP SIGNATURE-----\n\n_______________________________________________\nFull-Disclosure - We believe in it. \nCharter: http://lists.grok.org.uk/full-disclosure-charter.html\nHosted and sponsored by Secunia - http://secunia.com/\n",
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2010-2836"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2010-002128"
      },
      {
        "db": "BID",
        "id": "43390"
      },
      {
        "db": "VULHUB",
        "id": "VHN-45441"
      },
      {
        "db": "VULMON",
        "id": "CVE-2010-2836"
      },
      {
        "db": "PACKETSTORM",
        "id": "94205"
      },
      {
        "db": "PACKETSTORM",
        "id": "94147"
      }
    ],
    "trust": 2.25
  },
  "exploit_availability": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/exploit_availability#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "reference": "https://www.scap.org.cn/vuln/vhn-45441",
        "trust": 0.1,
        "type": "unknown"
      }
    ],
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-45441"
      }
    ]
  },
  "external_ids": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/external_ids#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "db": "NVD",
        "id": "CVE-2010-2836",
        "trust": 3.0
      },
      {
        "db": "BID",
        "id": "43390",
        "trust": 1.2
      },
      {
        "db": "SECUNIA",
        "id": "41552",
        "trust": 0.9
      },
      {
        "db": "VUPEN",
        "id": "ADV-2010-2478",
        "trust": 0.8
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2010-002128",
        "trust": 0.8
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201009-246",
        "trust": 0.7
      },
      {
        "db": "CISCO",
        "id": "20100922 CISCO IOS SSL VPN VULNERABILITY",
        "trust": 0.6
      },
      {
        "db": "PACKETSTORM",
        "id": "94147",
        "trust": 0.2
      },
      {
        "db": "VULHUB",
        "id": "VHN-45441",
        "trust": 0.1
      },
      {
        "db": "VULMON",
        "id": "CVE-2010-2836",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "94205",
        "trust": 0.1
      }
    ],
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-45441"
      },
      {
        "db": "VULMON",
        "id": "CVE-2010-2836"
      },
      {
        "db": "BID",
        "id": "43390"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2010-002128"
      },
      {
        "db": "PACKETSTORM",
        "id": "94205"
      },
      {
        "db": "PACKETSTORM",
        "id": "94147"
      },
      {
        "db": "NVD",
        "id": "CVE-2010-2836"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201009-246"
      }
    ]
  },
  "id": "VAR-201009-0063",
  "iot": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": true,
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-45441"
      }
    ],
    "trust": 0.01
  },
  "last_update_date": "2023-12-18T12:11:02.754000Z",
  "patch": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/patch#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "title": "cisco-sa-20100922-sslvpn",
        "trust": 0.8,
        "url": "http://www.cisco.com/warp/public/707/cisco-sa-20100922-sslvpn.shtml"
      },
      {
        "title": "21383",
        "trust": 0.8,
        "url": "http://tools.cisco.com/security/center/viewalert.x?alertid=21383"
      },
      {
        "title": "cisco-sa-20100922-sslvpn",
        "trust": 0.8,
        "url": "http://www.cisco.com/jp/support/public/ht/security/109/1091520/cisco-sa-20100922-sslvpn-j.shtml"
      },
      {
        "title": "Cisco: Cisco IOS SSL VPN Vulnerability",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=cisco_security_advisories_and_alerts_ciscoproducts\u0026qid=cisco-sa-20100922-sslvpn"
      }
    ],
    "sources": [
      {
        "db": "VULMON",
        "id": "CVE-2010-2836"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2010-002128"
      }
    ]
  },
  "problemtype_data": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "problemtype": "CWE-399",
        "trust": 1.9
      }
    ],
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-45441"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2010-002128"
      },
      {
        "db": "NVD",
        "id": "CVE-2010-2836"
      }
    ]
  },
  "references": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/references#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "trust": 1.8,
        "url": "http://www.cisco.com/en/us/products/products_security_advisory09186a0080b4a312.shtml"
      },
      {
        "trust": 0.8,
        "url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2010-2836"
      },
      {
        "trust": 0.8,
        "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2010-2836"
      },
      {
        "trust": 0.8,
        "url": "http://secunia.com/advisories/41552"
      },
      {
        "trust": 0.8,
        "url": "http://www.securityfocus.com/bid/43390"
      },
      {
        "trust": 0.8,
        "url": "http://www.vupen.com/english/advisories/2010/2478"
      },
      {
        "trust": 0.3,
        "url": "http://www.cisco.com/"
      },
      {
        "trust": 0.3,
        "url": "/archive/1/513900"
      },
      {
        "trust": 0.3,
        "url": "http://www.cisco.com/en/us/products/products_security_advisory09186a0080b4a312.shtml#@id"
      },
      {
        "trust": 0.2,
        "url": "http://www.cisco.com/warp/public/707/cisco-sa-20100922-sslvpn.shtml"
      },
      {
        "trust": 0.1,
        "url": "https://cwe.mitre.org/data/definitions/399.html"
      },
      {
        "trust": 0.1,
        "url": "https://www.rapid7.com/db/vulnerabilities/cisco-sa-20100922-sslvpn"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov"
      },
      {
        "trust": 0.1,
        "url": "http://tools.cisco.com/security/center/content/ciscosecurityadvisory/cisco-sa-20100922-sslvpn"
      },
      {
        "trust": 0.1,
        "url": "https://ca.secunia.com/?page=viewadvisory\u0026vuln_id=41552"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/products/corporate/evm/"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/advisories/41552/"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/vulnerability_scanning/corporate/wsus_sccm_3rd_third_party_patching/"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/advisories/secunia_security_advisories/"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/vulnerability_scanning/personal/"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/advisories/windows_insecure_library_loading/"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/advisories/41552/#comments"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/advisories/about_secunia_advisories/"
      },
      {
        "trust": 0.1,
        "url": "http://www.cisco.com/warp/public/620/1.html"
      },
      {
        "trust": 0.1,
        "url": "http://www.cisco.com/go/psirt"
      },
      {
        "trust": 0.1,
        "url": "http://www.cisco.com/en/us/docs/general/warranty/english/eu1ken_.html"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/"
      },
      {
        "trust": 0.1,
        "url": "http://www.cisco.com/en/us/support/tsd_cisco_worldwide_contacts.html"
      },
      {
        "trust": 0.1,
        "url": "http://www.cisco.com/web/about/security/intelligence/cvss-qandas.html"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2010-2836"
      },
      {
        "trust": 0.1,
        "url": "http://lists.grok.org.uk/full-disclosure-charter.html"
      },
      {
        "trust": 0.1,
        "url": "http://www.cisco.com/public/sw-center/sw-usingswc.shtml"
      },
      {
        "trust": 0.1,
        "url": "http://forums.cisco.com/eforum/servlet/eem?page=eem\u0026fn=script\u0026scriptid=2041"
      },
      {
        "trust": 0.1,
        "url": "http://www.cisco.com/warp/public/707/cisco-sa-20100922-bundle.shtml"
      },
      {
        "trust": 0.1,
        "url": "http://www.cisco.com/warp/public/707/cisco-amb-20090908-tcp24.shtml,"
      },
      {
        "trust": 0.1,
        "url": "http://www.cisco.com"
      },
      {
        "trust": 0.1,
        "url": "http://www.cisco.com/en/us/docs/ios/12_4t/12_4t11/htwebvpn.html"
      },
      {
        "trust": 0.1,
        "url": "http://www.cisco.com/en/us/products/products_security_vulnerability_policy.html"
      },
      {
        "trust": 0.1,
        "url": "http://www.cisco.com/web/about/security/intelligence/cisco_erp_sep10.html"
      },
      {
        "trust": 0.1,
        "url": "http://www.cisco.com/warp/public/707/cisco-amb-20090908-tcp24.shtml"
      },
      {
        "trust": 0.1,
        "url": "http://www.cisco.com/techsupport"
      },
      {
        "trust": 0.1,
        "url": "http://intellishield.cisco.com/security/alertmanager/cvss"
      }
    ],
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-45441"
      },
      {
        "db": "VULMON",
        "id": "CVE-2010-2836"
      },
      {
        "db": "BID",
        "id": "43390"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2010-002128"
      },
      {
        "db": "PACKETSTORM",
        "id": "94205"
      },
      {
        "db": "PACKETSTORM",
        "id": "94147"
      },
      {
        "db": "NVD",
        "id": "CVE-2010-2836"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201009-246"
      }
    ]
  },
  "sources": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "db": "VULHUB",
        "id": "VHN-45441"
      },
      {
        "db": "VULMON",
        "id": "CVE-2010-2836"
      },
      {
        "db": "BID",
        "id": "43390"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2010-002128"
      },
      {
        "db": "PACKETSTORM",
        "id": "94205"
      },
      {
        "db": "PACKETSTORM",
        "id": "94147"
      },
      {
        "db": "NVD",
        "id": "CVE-2010-2836"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201009-246"
      }
    ]
  },
  "sources_release_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2010-09-23T00:00:00",
        "db": "VULHUB",
        "id": "VHN-45441"
      },
      {
        "date": "2010-09-23T00:00:00",
        "db": "VULMON",
        "id": "CVE-2010-2836"
      },
      {
        "date": "2010-09-22T00:00:00",
        "db": "BID",
        "id": "43390"
      },
      {
        "date": "2010-10-13T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2010-002128"
      },
      {
        "date": "2010-09-25T10:02:38",
        "db": "PACKETSTORM",
        "id": "94205"
      },
      {
        "date": "2010-09-23T01:08:07",
        "db": "PACKETSTORM",
        "id": "94147"
      },
      {
        "date": "2010-09-23T19:00:13.980000",
        "db": "NVD",
        "id": "CVE-2010-2836"
      },
      {
        "date": "2010-09-26T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-201009-246"
      }
    ]
  },
  "sources_update_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2010-09-24T00:00:00",
        "db": "VULHUB",
        "id": "VHN-45441"
      },
      {
        "date": "2010-09-24T00:00:00",
        "db": "VULMON",
        "id": "CVE-2010-2836"
      },
      {
        "date": "2010-09-22T00:00:00",
        "db": "BID",
        "id": "43390"
      },
      {
        "date": "2010-10-13T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2010-002128"
      },
      {
        "date": "2010-09-24T18:12:02.890000",
        "db": "NVD",
        "id": "CVE-2010-2836"
      },
      {
        "date": "2010-09-26T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-201009-246"
      }
    ]
  },
  "threat_type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/threat_type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "remote",
    "sources": [
      {
        "db": "PACKETSTORM",
        "id": "94147"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201009-246"
      }
    ],
    "trust": 0.7
  },
  "title": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/title#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Cisco IOS of  SSL VPN Service disruption in functionality  (DoS) Vulnerabilities",
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2010-002128"
      }
    ],
    "trust": 0.8
  },
  "type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "resource management error",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-201009-246"
      }
    ],
    "trust": 0.6
  }
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2010-2836 (GCVE-0-2010-2836)

CERTA-2010-AVI-456

Description

Solution

CERTA-2010-AVI-456

Description

Solution

FKIE_CVE-2010-2836

GHSA-7M26-WXJ8-3CQR

GSD-2010-2836

VAR-201009-0063

Summary

Affected Products

Details

Vulnerability Scoring Details

Impact

Software Versions and Fixes

Workarounds

Obtaining Fixed Software

Exploitation and Public Announcements

Status of this Notice: FINAL

Distribution

Revision History

Cisco Security Procedures

Tags

Sightings

Nomenclature

Related by attack behaviour