CVE-2004-1111

Cisco IOS 2.2(18)EW, 12.2(18)EWA, 12.2(14)SZ, 12.2(18)S, 12.2(18)SE, 12.2(18)SV, 12.2(18)SW, and other versions without the "no service dhcp" command, keep undeliverable DHCP packets in the queue instead of dropping them, which allows remote attackers to cause a denial of service (dropped traffic) via multiple undeliverable DHCP packets that exceed the input queue size.
Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:o:cisco:ios:12.2\(14\)sz:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios:12.2\(18\)ew:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios:12.2\(18\)ewa:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios:12.2\(18\)s:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios:12.2\(18\)se:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios:12.2\(18\)sv:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios:12.2\(18\)sw:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios:12.2\(20\)ew:*:*:*:*:*:*:*
OR cpe:2.3:h:cisco:multiservice_platform_2650:*:*:*:*:*:*:*:*
cpe:2.3:h:cisco:multiservice_platform_2650xm:*:*:*:*:*:*:*:*
cpe:2.3:h:cisco:multiservice_platform_2651:*:*:*:*:*:*:*:*
cpe:2.3:h:cisco:multiservice_platform_2651xm:*:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:h:cisco:7200_router:*:*:*:*:*:*:*:*
cpe:2.3:h:cisco:7300_router:*:*:*:*:*:*:*:*
cpe:2.3:h:cisco:7500_router:*:*:*:*:*:*:*:*
cpe:2.3:h:cisco:7600_router:*:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_7600:*:*:sup720_msfc3:*:*:*:*:*

History

No history.

Information

Published : 2005-01-10 05:00

Updated : 2023-12-10 10:28


NVD link : CVE-2004-1111

Mitre link : CVE-2004-1111

CVE.ORG link : CVE-2004-1111


JSON object : View

Products Affected

cisco

  • 7500_router
  • multiservice_platform_2650xm
  • multiservice_platform_2650
  • 7300_router
  • 7600_router
  • 7200_router
  • multiservice_platform_2651xm
  • multiservice_platform_2651
  • ios
  • catalyst_7600