CVE-2004-0551

Cisco CatOS 5.x before 5.5(20) through 8.x before 8.2(2) and 8.3(2)GLX, as used in Catalyst switches, allows remote attackers to cause a denial of service (system crash and reload) by sending invalid packets instead of the final ACK portion of the three-way handshake to the (1) Telnet, (2) HTTP, or (3) SSH services, aka "TCP-ACK DoS attack."

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2004-08-06

Last modified

2024-08-08

Affected products

• Catalyst 2901 (Cisco)
• Catalyst 2902 (Cisco)
• Catalyst 2926 (Cisco)
• Catalyst 2926f (Cisco)
• Catalyst 2926gl (Cisco)
• Catalyst 2926gs (Cisco)
• Catalyst 2926t (Cisco)
• Catalyst 2948 (Cisco)
• Catalyst 2948-ge-tx (Cisco)
• Catalyst 2948g-l3 (Cisco)
• Catalyst 2980g (Cisco)
• Catalyst 2980g-a (Cisco)
• Catalyst 4000 (Cisco)
• Catalyst 4500 (Cisco)
• Catalyst 4503 (Cisco)
• Catalyst 4506 (Cisco)
• Catalyst 4507r (Cisco)
• Catalyst 4510r (Cisco)
• Catalyst 4912g (Cisco)
• Catalyst 5000 (Cisco)
• Catalyst 6000 Ws-svc-nam-1 (Cisco)
• Catalyst 6000 Ws-svc-nam-2 (Cisco)
• Catalyst 6000 Ws-x6380-nam (Cisco)
• Catos (Cisco)

References

• http://www.cisco.com/warp/public/707/cisco-sa-20040609-catos.shtml
• http://www.kb.cert.org/vuls/id/245190
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16370