Details of VAR-200212-0119

ID

VAR-200212-0119

CVE

CVE-2002-2052

TITLE

Cisco IOS 12.1 Handling a wide range TCP Scan Denial of Service Attack Vulnerability

Trust: 0.6

sources: CNNVD: CNNVD-200212-129

DESCRIPTION

Cisco 2611 router running IOS 12.1(6.5), possibly an interim release, allows remote attackers to cause a denial of service via port scans such as (1) scanning all ports on a single host and (2) scanning a network of hosts for a single open port through the router. NOTE: the vendor could not reproduce this issue, saying that the original reporter was using an interim release of the software. IOS is the Internet Operating System, used on Cisco routers. It is distributed and maintained by Cisco. This vulnerability has been reported to exist on a Cisco 2611 router running IOS 12.1(6.5). Cisco has reported that they are unable to reproduce this problem. It is possible that this issue is the result of a configuration error or site specific conditions. However, according to the test by CISCO technicians, this problem did not occur, which may be caused by specific configurations

Trust: 1.26

sources: NVD: CVE-2002-2052 // BID: 4947 // VULHUB: VHN-6435

AFFECTED PRODUCTS

vendor:	cisco	model:	ios	scope:	eq	version:	12.1\(6.5\)	Trust: 1.6
vendor:	cisco	model:	ios	scope:	eq	version:	12.1	Trust: 0.3

sources: BID: 4947 // CNNVD: CNNVD-200212-129 // NVD: CVE-2002-2052

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2002-2052
value:	MEDIUM
Trust: 1.0
CNNVD:	CNNVD-200212-129
value:	MEDIUM
Trust: 0.6
VULHUB:	VHN-6435
value:	MEDIUM
Trust: 0.1

nvd@nist.gov:	CVE-2002-2052
severity:	MEDIUM
baseScore:	5.0
vectorString:	AV:N/AC:L/AU:N/C:N/I:N/A:P
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	PARTIAL
exploitabilityScore:	10.0
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.0
VULHUB:	VHN-6435
severity:	MEDIUM
baseScore:	5.0
vectorString:	AV:N/AC:L/AU:N/C:N/I:N/A:P
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	PARTIAL
exploitabilityScore:	10.0
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

sources: VULHUB: VHN-6435 // CNNVD: CNNVD-200212-129 // NVD: CVE-2002-2052

PROBLEMTYPE DATA

problemtype:

NVD-CWE-Other

Trust: 1.0

sources: NVD: CVE-2002-2052

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-200212-129

TYPE

other

Trust: 0.6

sources: CNNVD: CNNVD-200212-129

EXTERNAL IDS

db:	BID	id:	4947	Trust: 2.0
db:	NVD	id:	CVE-2002-2052	Trust: 1.7
db:	CNNVD	id:	CNNVD-200212-129	Trust: 0.7
db:	BUGTRAQ	id:	20020605 THREE POSSIBLE DOS ATTACKS AGAINST SOME IOS VERSIONS.	Trust: 0.6
db:	BUGTRAQ	id:	20020606 RE: THREE POSSIBLE DOS ATTACKS AGAINST SOME IOS VERSIONS.	Trust: 0.6
db:	NSFOCUS	id:	2948	Trust: 0.6
db:	XF	id:	9281	Trust: 0.6
db:	VULHUB	id:	VHN-6435	Trust: 0.1

sources: VULHUB: VHN-6435 // BID: 4947 // CNNVD: CNNVD-200212-129 // NVD: CVE-2002-2052

REFERENCES

url:	http://www.securityfocus.com/bid/4947	Trust: 1.7
url:	http://archives.neohapsis.com/archives/bugtraq/2002-06/0027.html	Trust: 1.7
url:	http://archives.neohapsis.com/archives/bugtraq/2002-06/0050.html	Trust: 1.7
url:	http://www.iss.net/security_center/static/9281.php	Trust: 1.7
url:	http://www.nsfocus.net/vulndb/2948	Trust: 0.6
url:	http://www.cisco.com/en/us/products/sw/voicesw/ps4625/index.html	Trust: 0.3

sources: VULHUB: VHN-6435 // BID: 4947 // CNNVD: CNNVD-200212-129 // NVD: CVE-2002-2052

CREDITS

Andrew Vladimirov※ andrew@arhont.com※Sharad Ahlawat※ sahlawat@cisco.com

Trust: 0.6

sources: CNNVD: CNNVD-200212-129

SOURCES

db:	VULHUB	id:	VHN-6435
db:	BID	id:	4947
db:	CNNVD	id:	CNNVD-200212-129
db:	NVD	id:	CVE-2002-2052

LAST UPDATE DATE

2024-08-14T13:51:26.060000+00:00

SOURCES UPDATE DATE

db:	VULHUB	id:	VHN-6435	date:	2008-09-05T00:00:00
db:	BID	id:	4947	date:	2002-06-05T00:00:00
db:	CNNVD	id:	CNNVD-200212-129	date:	2005-10-20T00:00:00
db:	NVD	id:	CVE-2002-2052	date:	2008-09-05T20:32:12.337

SOURCES RELEASE DATE

db:	VULHUB	id:	VHN-6435	date:	2002-12-31T00:00:00
db:	BID	id:	4947	date:	2002-06-05T00:00:00
db:	CNNVD	id:	CNNVD-200212-129	date:	2002-06-05T00:00:00
db:	NVD	id:	CVE-2002-2052	date:	2002-12-31T05:00:00