| Vulnerability Name: | CVE-2004-0054 (CCN-14204) | ||||||||
| Assigned: | 2004-01-13 | ||||||||
| Published: | 2004-01-13 | ||||||||
| Updated: | 2017-10-11 | ||||||||
| Summary: | Multiple vulnerabilities in the H.323 protocol implementation for Cisco IOS 11.3T through 12.2T allow remote attackers to cause a denial of service and possibly execute arbitrary code, as demonstrated by the NISCC/OUSPG PROTOS test suite for the H.225 protocol. | ||||||||
| CVSS v3 Severity: | 7.5 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
| ||||||||
| CVSS v2 Severity: | 7.5 High (CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P)
| ||||||||
| Vulnerability Type: | CWE-Other | ||||||||
| Vulnerability Consequences: | Denial of Service | ||||||||
| References: | Source: MITRE Type: CNA CVE-2004-0054 Source: CCN Type: SECTRACK ID: 1008685 Cisco IOS Routers Can Be Crashed With Malformed H.323 Packets Source: CERT Type: Patch, Third Party Advisory, US Government Resource CA-2004-01 Source: CCN Type: CIAC Information Bulletin O-050 Cisco Vulnerabilities in H.323 Message Processing Source: CCN Type: Cisco Systems Inc. Security Advisory, 2004 January 13 UTC 1200 Vulnerabilities in H.323 Message Processing Source: CISCO Type: Patch, Vendor Advisory 20040113 Vulnerabilities in H.323 Message Processing Source: CCN Type: US-CERT VU#749342 Multiple vulnerabilities in H.323 implementations Source: CERT-VN Type: Patch, Third Party Advisory, US Government Resource VU#749342 Source: BID Type: UNKNOWN 9406 Source: CCN Type: BID-9406 Multiple Vendor H.323 Protocol Implementation Vulnerabilities Source: SECTRACK Type: UNKNOWN 1008685 Source: CCN Type: NISCC Vulnerability Advisory 006489/H323 Vulnerability Issues in Implementations of the H.323 Protocol Source: MISC Type: UNKNOWN http://www.uniras.gov.uk/vuls/2004/006489/h323.htm Source: CCN Type: Internet Security Systems Security Alert, January 13, 2004 Multiple Vendor H.323 Implementation Vulnerabilities Source: XF Type: UNKNOWN cisco-h323-dos(14204) Source: OVAL Type: UNKNOWN oval:org.mitre.oval:def:4884 | ||||||||
| Vulnerable Configuration: | Configuration 1: Configuration CCN 1:  Denotes that component is vulnerable | ||||||||
| Oval Definitions | |||||||||
| |||||||||
| BACK | |||||||||