Vulnerabilities > CVE-2009-2866 - Denial of Service vulnerability in Cisco IOS H.323

CVSS 7.8 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

COMPLETE

network

low complexity

cisco

nessus

NVD

Published: 2009-09-28

Updated: 2017-08-17

Summary

Unspecified vulnerability in Cisco IOS 12.2 through 12.4 allows remote attackers to cause a denial of service (device reload) via a crafted H.323 packet, aka Bug ID CSCsz38104.

Vulnerable Configurations

Part	Description	Count
OS	Cisco Cisco IOS 12.2B Cisco IOS 12.2Bx Cisco IOS 12.2Cz Cisco IOS 12.2Mc Cisco IOS 12.2T Cisco IOS 12.2Yh Cisco IOS 12.2Yj Cisco IOS 12.2Yl Cisco IOS 12.2Ym Cisco IOS 12.2Yn Cisco IOS 12.2Yt Cisco IOS 12.2Yu Cisco IOS 12.2Yv Cisco IOS 12.2Zc Cisco IOS 12.2Zd Cisco IOS 12.2Ze Cisco IOS 12.2Zf Cisco IOS 12.2Zh Cisco IOS 12.2Zl Cisco IOS 12.2Zp Cisco IOS 12.3 Cisco IOS 12.3B Cisco IOS 12.3Jk Cisco IOS 12.3T Cisco IOS 12.3Va Cisco IOS 12.3Xa Cisco IOS 12.3Xb Cisco IOS 12.3Xc Cisco IOS 12.3Xd Cisco IOS 12.3Xe Cisco IOS 12.3Xf Cisco IOS 12.3Xg Cisco IOS 12.3Xj Cisco IOS 12.3Xk Cisco IOS 12.3Xl Cisco IOS 12.3Xq Cisco IOS 12.3Xr Cisco IOS 12.3Xu Cisco IOS 12.3Xw Cisco IOS 12.3Xx Cisco IOS 12.3Xy Cisco IOS 12.3Xz Cisco IOS 12.3Yf Cisco IOS 12.3Yg Cisco IOS 12.3Yk Cisco IOS 12.3Ym Cisco IOS 12.3Yq Cisco IOS 12.3Ys Cisco IOS 12.3Yt Cisco IOS 12.3Yu Cisco IOS 12.3Yx Cisco IOS 12.3Yz Cisco IOS 12.3Za Cisco IOS 12.4 Cisco IOS 12.4Mr Cisco IOS 12.4T Cisco IOS 12.4Xa Cisco IOS 12.4Xb Cisco IOS 12.4Xc Cisco IOS 12.4Xd Cisco IOS 12.4Xe Cisco IOS 12.4Xj Cisco IOS 12.4Xl Cisco IOS 12.4Xm Cisco IOS 12.4Xp Cisco IOS 12.4Xt Cisco IOS 12.4Xv Cisco IOS 12.4Xw Cisco IOS 12.4Xy Cisco IOS 12.4Xz Cisco IOS 12.4Ya Cisco IOS 12.4Yb	72

Nessus

NASL family	CISCO
NASL id	CISCO-SA-20090923-H323HTTP.NASL
description	The H.323 implementation in Cisco IOS Software contains a vulnerability that can be exploited remotely to cause a device that is running Cisco IOS Software to reload. Cisco has released free software updates that address this vulnerability. There are no workarounds to mitigate the vulnerability apart from disabling H.323 if the device that is running Cisco IOS Software does not need to run H.323 for VoIP services.
last seen	2019-10-28
modified	2010-09-01
plugin id	49042
published	2010-09-01
reporter	This script is (C) 2010-2018 Tenable Network Security, Inc.
source	https://www.tenable.com/plugins/nessus/49042
title	Cisco IOS Software H.323 Denial of Service Vulnerability - Cisco Systems

Summary

Vulnerable Configurations

Nessus

References