Description
The Intrusion Prevention System (IPS) feature for Cisco IOS 12.4XE to 12.3T allows remote attackers to bypass IPS signatures that use regular expressions via fragmented packets.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5858 ↗
- https://exchange.xforce.ibmcloud.com/vulnerabilities/32473 ↗
- http://www.securitytracker.com/id?1017631 ↗
- http://www.cisco.com/en/US/products/products_security_advisory09186a00807e0a5b.shtml ↗
- http://www.securityfocus.com/bid/22549 ↗
- http://www.cisco.com/en/US/products/products_security_response09186a00807e0a5e.html ↗
- http://osvdb.org/33052 ↗
- http://secunia.com/advisories/24142 ↗
- http://www.vupen.com/english/advisories/2007/0597 ↗