Buffer overflow in the embedded HTTP server for Cisco Catalyst switches running CatOS 5.4 through 7.3 allows remote attackers to cause a denial of service (reset) via a long HTTP request.

 Sending bogus ICMP redirect packets, a malicious user can either disrupt or intercept communication from a router. This vulnerability is documented with the CISCO bug ID CSCdx92043

The remote switch is vulnerable to a buffer overflow in its embedded HTTP server. An attacker may use this flaw to make your switch reboot continuously, resulting in a denial of service.

This vulnerability is documented with the CISCO bug ID CSCdy26428.

ID	Name	Product	Family	Severity
2242	Cisco Multiple DoS (Bug ID CSCdx92043)	Nessus Network Monitor	SNMP	high
2241	Cisco Multiple DoS (Bug ID CSCdx92043)	Nessus Network Monitor	SNMP	high
2240	Cisco Multiple DoS (Bug ID CSCdx92043)	Nessus Network Monitor	SNMP	high
11285	Cisco Catalyst Switches Embedded HTTP Server Long HTTP Request DoS (CSCdy26428)	Nessus	CISCO	high

Detections

Analytics

CVE-2002-1222

high

Tenable Plugins

high

high

high

high