OSVDB ID: 24433 Title: Cisco 11500 Content Services Switch HTTP Compression DoS |
Info |
|
|
Dates |
||||
|
|
Description |
Cisco 11500 series Content Service Switches contains a flaw that may allow a remote denial of service. The issue is triggered when either "a valid, but obsolete" or a "specially crafted" HTTP request is received, and will result in loss of availability for the service. The flaw is only exploitable when HTTP compression is enabled, but it is not clear what role compression plays in exploitation of the flaw. |
Classification |
Location:
Remote / Network Access
Attack Type: Denial of Service Impact: Loss of Availability Exploit: Exploit Unknown Disclosure: OSVDB Verified OSVDB: Web Related |
Solution |
Upgrade to version 8.10.1.6 or higher, as it has been reported to fix this vulnerability. It is also possible to correct the flaw by disabling HTTP compression. |
Products |
|
References |
|
Credit |
Unknown or Incomplete |