vulnerability bulletin CVE-2012-1338

Cisco Catalyst 37x0, IOS: denial of service via login

Synthesis of the vulnerability

An attacker can authenticate quickly, in order to stop the Catalyst 3750 or 3760 switch.
Impacted products: Cisco Catalyst, IOS.
Severity: 1/4.
Creation date: 07/08/2012.
Identifiers: 26615, BID-54834, CSCts88664, CVE-2012-1338, VIGILANCE-VUL-11828.

Description of the vulnerability

On the web interface of Catalyst 3750 and 3760 switches, users can enter their login/password, and then authenticate.

However, if this operation is done too quickly, the switch stops.

An attacker can therefore authenticate quickly, in order to stop the Catalyst 3750 or 3760 switch.
Complete Vigil@nce bulletin.... (free access)

Share this bulletin

          

Computer vulnerabilities tracking service

Vigil@nce provides a software vulnerabilities bulletin. The Vigil@nce team tracks computer vulnerabilities impacting systems and applications. The Vigil@nce computer vulnerability tracking service alerts your teams of vulnerabilities or threats impacting your information system. The technology watch team tracks security threats targeting the computer system.