Lucene search

[email protected]CVE-2006-0354

HistoryJan 22, 2006 - 8:03 p.m.

CVE-2006-0354

2006-01-2220:03:00

CWE-399

[email protected]

web.nvd.nist.gov

cisco

ios

aironet wap

denial of service

spoofed arp

memory exhaustion

vulnerability

cve-2006-0354

6.3 Medium

AI Score

Confidence

High

5.5 Medium

CVSS2

Access Vector

Access Complexity

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:A/AC:L/Au:S/C:N/I:N/A:C

0.013 Low

EPSS

Percentile

85.8%

JSON

Cisco IOS before 12.3-7-JA2 on Aironet Wireless Access Points (WAP) allows remote authenticated users to cause a denial of service (termination of packet passing or termination of client connections) by sending the management interface a large number of spoofed ARP packets, which creates a large ARP table that exhausts memory, aka Bug ID CSCsc16644.

Affected configurations

NVD

Node

ciscoaironet_ap1100

ciscoaironet_ap1130ag

ciscoaironet_ap1200

ciscoaironet_ap1230ag

ciscoaironet_ap1240ag

ciscoaironet_ap1300

ciscoaironet_ap1400

ciscoaironet_ap350

CPENameOperatorVersion
cisco:aironet_ap1100cisco aironet ap1100eq*
cisco:aironet_ap1130agcisco aironet ap1130ageq*
cisco:aironet_ap1200cisco aironet ap1200eq*
cisco:aironet_ap1230agcisco aironet ap1230ageq*
cisco:aironet_ap1240agcisco aironet ap1240ageq*
cisco:aironet_ap1300cisco aironet ap1300eq*
cisco:aironet_ap1400cisco aironet ap1400eq*
cisco:aironet_ap350cisco aironet ap350eq*

CPE	Name	Operator	Version
cisco:aironet_ap1100	cisco aironet ap1100	eq	*
cisco:aironet_ap1130ag	cisco aironet ap1130ag	eq	*
cisco:aironet_ap1200	cisco aironet ap1200	eq	*
cisco:aironet_ap1230ag	cisco aironet ap1230ag	eq	*
cisco:aironet_ap1240ag	cisco aironet ap1240ag	eq	*
cisco:aironet_ap1300	cisco aironet ap1300	eq	*
cisco:aironet_ap1400	cisco aironet ap1400	eq	*
cisco:aironet_ap350	cisco aironet ap350	eq	*

References

secunia.com/advisories/18430

securityreason.com/securityalert/339

securitytracker.com/id?1015483

www.cisco.com/warp/public/707/cisco-sa-20060112-wireless.shtml

www.osvdb.org/22375

www.securityfocus.com/bid/16217

www.vupen.com/english/advisories/2006/0176

exchange.xforce.ibmcloud.com/vulnerabilities/24086

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5680

6.3 Medium

AI Score

Confidence

High

5.5 Medium

CVSS2

Access Vector

Access Complexity

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:A/AC:L/Au:S/C:N/I:N/A:C

0.013 Low

EPSS

Percentile

85.8%

JSON

Related for CVE-2006-0354

prion1 cisco1 cvelist1 nvd1