Vulnerabilities > CVE-2013-1100 - Resource Management Errors vulnerability in Cisco IOS

CVSS 5.4 - MEDIUM

Attack vector

NETWORK

Attack complexity

HIGH

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

COMPLETE

network

high complexity

cisco

CWE-399

NVD

Published: 2013-02-13

Updated: 2013-02-14

Summary

The HTTP server in Cisco IOS on Catalyst switches does not properly handle TCP socket events, which allows remote attackers to cause a denial of service (device crash) via crafted packets on TCP port (1) 80 or (2) 443, aka Bug ID CSCuc53853.

Vulnerable Configurations

Part	Description	Count
OS	Cisco Cisco IOS -	1
Hardware	Cisco Cisco Catalyst 2820 * Cisco Catalyst 2820 9.0_0.07 Cisco Catalyst 2900 * Cisco Catalyst 2900 Lre_Xl Cisco Catalyst 2900 Xl Cisco Catalyst 2900 Vlan * Cisco Catalyst 2900Xl * Cisco Catalyst 2901 * Cisco Catalyst 2902 * Cisco Catalyst 2920 * Cisco Catalyst 2926 * Cisco Catalyst 2926F * Cisco Catalyst 2926Gl * Cisco Catalyst 2926Gs * Cisco Catalyst 2926T * Cisco Catalyst 2940 * Cisco Catalyst 2948 * Cisco Catalyst 2948 GE TX * Cisco Catalyst 2948G * Cisco Catalyst 2948G L3 * Cisco Catalyst 2950 * Cisco Catalyst 2950 LRE * Cisco Catalyst 2955 * Cisco Catalyst 2970 * Cisco Catalyst 2980G * Cisco Catalyst 2980G A * Cisco Catalyst 3000 * Cisco Catalyst 3200 * Cisco Catalyst 3500 * Cisco Catalyst 3500 XL * Cisco Catalyst 3500Xl * Cisco Catalyst 3550 * Cisco Catalyst 3560 * Cisco Catalyst 3560 E * Cisco Catalyst 3560 X * Cisco Catalyst 3750 * Cisco Catalyst 3750 E * Cisco Catalyst 3750 X * Cisco Catalyst 3750 Metro * Cisco Catalyst 3750G * Cisco Catalyst 3900 * Cisco Catalyst 4000 * Cisco Catalyst 4200 * Cisco Catalyst 4224 * Cisco Catalyst 4232 * Cisco Catalyst 4232 13 * Cisco Catalyst 4500 * Cisco Catalyst 4503 * Cisco Catalyst 4506 * Cisco Catalyst 4507R * Cisco Catalyst 4510R * Cisco Catalyst 4840G * Cisco Catalyst 4908G L3 * Cisco Catalyst 4912G * Cisco Catalyst 4948 * Cisco Catalyst 5000 * Cisco Catalyst 5500 * Cisco Catalyst 5505 * Cisco Catalyst 5509 * Cisco Catalyst 6000 * Cisco Catalyst 6000 WS SVC NAM 1 2.2\(1A\) Cisco Catalyst 6000 WS SVC NAM 1 3.1\(1A\) Cisco Catalyst 6000 WS SVC NAM 2 2.2\(1A\) Cisco Catalyst 6000 WS SVC NAM 2 3.1\(1A\) Cisco Catalyst 6000 WS X6380 NAM 2.1\(2\) Cisco Catalyst 6000 WS X6380 NAM 3.1\(1A\) Cisco Catalyst 6500 * Cisco Catalyst 6500 WS SVC NAM 1 2.2\(1A\) Cisco Catalyst 6500 WS SVC NAM 1 3.1\(1A\) Cisco Catalyst 6500 WS SVC NAM 2 2.2\(1A\) Cisco Catalyst 6500 WS SVC NAM 2 3.1\(1A\) Cisco Catalyst 6500 WS X6380 NAM 2.1\(2\) Cisco Catalyst 6500 WS X6380 NAM 3.1\(1A\) Cisco Catalyst 6503 E - Cisco Catalyst 6504 E - Cisco Catalyst 6506 E - Cisco Catalyst 6509 E - Cisco Catalyst 6509 NEB A - Cisco Catalyst 6509 V E - Cisco Catalyst 6513 - Cisco Catalyst 6513 E - Cisco Catalyst 6608 * Cisco Catalyst 6624 * Cisco Catalyst 7600 * Cisco Catalyst 7600 WS SVC NAM 1 2.2\(1A\) Cisco Catalyst 7600 WS SVC NAM 1 3.1\(1A\) Cisco Catalyst 7600 WS SVC NAM 2 2.2\(1A\) Cisco Catalyst 7600 WS SVC NAM 2 3.1\(1A\) Cisco Catalyst 7600 WS X6380 NAM 2.1\(2\) Cisco Catalyst 7600 WS X6380 NAM 3.1\(1A\) Cisco Catalyst 8500 * Cisco Catalyst 8510Csr * Cisco Catalyst 8510Msr * Cisco Catalyst 8540Csr * Cisco Catalyst 8540Msr * Cisco Catalyst WS C2924 XL *	96

Common Weakness Enumeration (CWE)

CWE-399 - Resource Management Errors

References

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1100