Vulnerability in Cisco Ids Sensor Software
CVE-2006-4910
The web administration interface (mainApp) to Cisco IDS before 4.1(5c), and IPS 5.0 before 5.0(6p1) and 5.1 before 5.1(2) allows remote attackers to cause a denial of service (unresponsive device) via a crafted SSLv2 Client Hello packet.
EPSS: 0.035 (88.0th percentile) — read the EPSS interpretation.
Affected products
- Cisco Ids_sensor_software — versions 4.1\(5b\)
- Cisco Ips_sensor_software — versions 5.0\(6\)p1, 5.1\(1\)
- N/a — versions n/a
References
- cve@mitre.org (x_refsource_CISCO, vendor-advisory)
- cve@mitre.org (x_refsource_SECUNIA, third-party-advisory)
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (vdb-entry, x_refsource_SECTRACK)
- cve@mitre.org (US Government Resource, x_refsource_CERT-VN, third-party-advisory)
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (x_refsource_OSVDB, vdb-entry)
- cve@mitre.org (vdb-entry, x_refsource_VUPEN)