Buffer overflow in Cisco Catos

CVE-2002-1222

Buffer overflow in the embedded HTTP server for Cisco Catalyst switches running CatOS 5.4 through 7.3 allows remote attackers to cause a denial of service (reset) via a long HTTP request.

Vulnerability class: Buffer Overflow

EPSS: 0.086 (94.5th percentile) — read the EPSS interpretation.

Affected products

Cisco Catos — versions 5.4, 5.5, 5.5\(13a\)
N/a — versions n/a

Weakness classification (CWE)

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer

References

cve@mitre.org (x_refsource_CISCO, vendor-advisory, Patch, Vendor Advisory)
cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (Exploit, Patch, vdb-entry, x_refsource_BID)