Cisco Catalyst Telnetd Authentication Failure Saturation Memory Leak Remote DoS (CSCds66191)

This script is (C) 2002-2014 Tenable Network Security, Inc.


Synopsis :

The remote device is missing a vendor-supplied security patch.

Description :

A series of failed telnet authentication attempts to the switch can
cause the Catalyst Switch to fail to pass traffic or accept
management connections until the system is rebooted or a power cycle
is performed. All types of telnet authentication are affected,
including Kerberized telnet, and AAA authentication.

This vulnerability is documented as Cisco bug ID CSCds66191.

Solution :

http://www.nessus.org/u?2d0daaea

Risk factor :

High / CVSS Base Score : 7.8
(CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C)
CVSS Temporal Score : 6.8
(CVSS2#E:H/RL:OF/RC:C)
Public Exploit Available : true

Family: CISCO

Nessus Plugin ID: 10978 (CSCds66191.nasl)

Bugtraq ID: 2072

CVE ID: CVE-2001-0041