Vulnerability in Cisco Content Delivery System

CVE-2011-1649

The Internet Streamer application in Cisco Content Delivery System (CDS) with software 2.5.7, 2.5.8, and 2.5.9 before build 126 allows remote attackers to cause a denial of service (Web Engine crash) via a crafted URL, aka Bug IDs CSCtg67333 and CSCth25341.

EPSS: 0.012 (65.3th percentile) — read the EPSS interpretation.

Affected products

Cisco Content_delivery_system — versions 2.5.7, 2.5.8, 2.5.9
Cisco Content_delivery_system_engine
N/a — versions n/a

Weakness classification (CWE)

CWE-399

References

psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)
psirt@cisco.com (vdb-entry, x_refsource_SECTRACK)