| Vulnerability Name: | CVE-2004-0244 (CCN-15013) | ||||||||
| Assigned: | 2004-02-03 | ||||||||
| Published: | 2004-02-03 | ||||||||
| Updated: | 2017-10-11 | ||||||||
| Summary: | Cisco 6000, 6500, and 7600 series systems with Multilayer Switch Feature Card 2 (MSFC2) and a FlexWAN or OSM module allow local users to cause a denial of service (hang or reset) by sending a layer 2 frame packet that encapsulates a layer 3 packet, but has inconsistent length values with that packet. | ||||||||
| CVSS v3 Severity: | 4.0 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
| ||||||||
| CVSS v2 Severity: | 4.7 Medium (CVSS v2 Vector: AV:L/AC:M/Au:N/C:N/I:N/A:C)
| ||||||||
| Vulnerability Type: | CWE-20 | ||||||||
| Vulnerability Consequences: | Denial of Service | ||||||||
| References: | Source: MITRE Type: CNA CVE-2004-0244 Source: CCN Type: SA10780 Cisco 6000/6500/7600 Series Denial of Service Vulnerability Source: SECUNIA Type: UNKNOWN 10780 Source: CCN Type: Cisco Systems Inc. Security Advisory, 2004 February 03 1600 UTC (GMT) Cisco 6000/6500/7600 Crafted Layer 2 Frame Vulnerability Source: CISCO Type: Vendor Advisory 20040203 Cisco 6000/6500/7600 Crafted Layer 2 Frame Vulnerability Source: CCN Type: US-CERT VU#810062 Cisco 6000/6500/7600 series systems fail to properly process layer 2 frames Source: CERT-VN Type: US Government Resource VU#810062 Source: CCN Type: OSVDB ID: 3804 Cisco IOS 6000/6500/7600 Series Layer 2 Frame DoS Source: BID Type: Vendor Advisory 9562 Source: CCN Type: BID-9562 Cisco IOS MSFC2 Malformed Layer 2 Frame Denial Of Service Vulnerability Source: XF Type: UNKNOWN cisco-malformed-frame-dos(15013) Source: XF Type: UNKNOWN cisco-malformed-frame-dos(15013) Source: OVAL Type: UNKNOWN oval:org.mitre.oval:def:5828 | ||||||||
| Vulnerable Configuration: | Configuration 1: Configuration CCN 1:  Denotes that component is vulnerable | ||||||||
| Oval Definitions | |||||||||
| |||||||||
| BACK | |||||||||