Detections
Analytics
Cisco IOS HTTP Server Vulnerability - Cisco Systems
high Nessus Plugin ID 48949
Language:
Synopsis
The remote device is missing a vendor-supplied security patch.Description
A defect in multiple releases of Cisco IOS software will cause a Cisco router or switch to halt and reload if the IOS HTTP service is enabled and browsing to "http://<router-ip>/%%" is attempted. This defect can be exploited to produce a denial of service (DoS) attack. This defect has been discussed on public mailing lists and should be considered public information. The vulnerability, identified as Cisco bug ID CSCdr36952, affects virtually all mainstream Cisco routers and switches running Cisco IOS software releases 11.1 through 12.1, inclusive. The vulnerability has been corrected and Cisco is making fixed releases available to replace all affected IOS releases. Customers are urged to upgrade to releases that are not vulnerable to this defect as shown in detail below. The vulnerability can be mitigated by disabling the IOS HTTP server, using an access-list on an interface in the path to the router to prevent unauthorized network connections to the HTTP server, or applying an access-class option directly to the HTTP server itself. The IOS HTTP server is enabled by default only on Cisco 1003, 1004, and 1005 routers that are not configured. In all other cases, the IOS http server must be explicitly enabled in order to exploit this defect.Solution
Apply the relevant patch referenced in Cisco Security Advisory cisco-sa-20000514-ios-http-server.See Also
https://seclists.org/bugtraq/2000/Apr/250
Plugin Details
Severity: High
ID: 48949
File Name: cisco-sa-20000514-ios-http-serverhttp.nasl
Version: 1.17
Type: local
Family: CISCO
Published: 9/1/2010
Updated: 11/15/2018
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 4.2
CVSS v2
Risk Factor: High
Base Score: 7.1
Temporal Score: 5.6
Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:N/A:C
Vulnerability Information
CPE: cpe:/o:cisco:ios
Required KB Items: Host/Cisco/IOS/Version
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 5/14/2000
Vulnerability Publication Date: 4/27/2000
Reference Information
CVE: CVE-2000-0380
BID: 1154