Session fixation

2007-05-2219:30:00

PRIOn knowledge base

www.prio-n.com

6.9 Medium

AI Score

Confidence

High

0.074 Low

EPSS

Percentile

94.1%

JSON

Cisco IOS 12.4 and earlier, when using the crypto packages and SSL support is enabled, allows remote attackers to cause a denial of service via a malformed (1) ClientHello, (2) ChangeCipherSpec, or (3) Finished message during an SSL session.

CPENameOperatorVersion
ios_transmission_control_protocoleq12.3.0-xf
ios_transmission_control_protocoleq12.3.0-xh
ios_transmission_control_protocoleq12.2.0-dd
ios_transmission_control_protocoleq12.3.0-yt
ios_transmission_control_protocoleq12.2.0-sv
ios_transmission_control_protocoleq12.2.0-zb
ios_transmission_control_protocoleq12.1.0-yb
ios_transmission_control_protocoleq12.1.0-ey
ios_transmission_control_protocoleq12.2.0-cy
ios_transmission_control_protocoleq12.2.0-se

Name	Operator	Version
ios_transmission_control_protocol	eq	12.3.0-xf
ios_transmission_control_protocol	eq	12.3.0-xh
ios_transmission_control_protocol	eq	12.2.0-dd
ios_transmission_control_protocol	eq	12.3.0-yt
ios_transmission_control_protocol	eq	12.2.0-sv
ios_transmission_control_protocol	eq	12.2.0-zb
ios_transmission_control_protocol	eq	12.1.0-yb
ios_transmission_control_protocol	eq	12.1.0-ey
ios_transmission_control_protocol	eq	12.2.0-cy
ios_transmission_control_protocol	eq	12.2.0-se