SHARE

iDefense Alert: Cisco Web Administration DDoS Vulnerability

Security intelligence firm iDefense Inc. on April 1, reported that remote exploitation of a design error vulnerability in Cisco Systems Inc.’ 600 series Web Administration service allows for a distributed-denial-of-service (DDoS) condition. The company rated the severity of this security event as high. The Web Administration service on the Cisco 627, 633, 673, 675, 675E, […]

Written By

David Morgenstern

Apr 1, 2004

Channel Insider content and product recommendations are editorially independent. We may make money when you click on links to our partners. Learn More

Security intelligence firm iDefense Inc. on April 1, reported that remote exploitation of a design error vulnerability in Cisco Systems Inc.’ 600 series Web Administration service allows for a distributed-denial-of-service (DDoS) condition. The company rated the severity of this security event as high.

The Web Administration service on the Cisco 627, 633, 673, 675, 675E, 677, 677i and 678 routers are unable to properly handle multiple ‘GET’ requests from separate clients. When the Cisco 600 series router is accessed via the HTTP protocol (TCP port 80) through multiple connections, the Cisco 600 series router will fail, the Reston, Va.-based security company said in Thursday’s alert report.

“The Cisco 600 series router will stop routing data and will also stop responding to configuration requests via the web interface. The Cisco 600 series routers commonly ship with the web interface enabled by default, and many ISPs provide them to customers in this default configuration,” the report stated.

Click here for the full story.

iDefense Alert: Cisco Web Administration DDoS Vulnerability

David Morgenstern

Recommended for you...

Company

Categories