Executive Summary
| Summary | |
|---|---|
| Title | Cisco Content Delivery System Internet Streamer: Web Server Vulnerability |
| Informations | |||
|---|---|---|---|
| Name | cisco-sa-20110525-spcdn | First vendor Publication | 2010-09-14 |
| Vendor | Cisco | Last vendor Modification | 2011-05-25 |
| Severity (Vendor) | N/A | Revision | 1.0 |
Security-Database Scoring CVSS v3
| Cvss vector : N/A | |||
|---|---|---|---|
| Overall CVSS Score | NA | ||
| Base Score | NA | Environmental Score | NA |
| impact SubScore | NA | Temporal Score | NA |
| Exploitabality Sub Score | NA | ||
| Calculate full CVSS 3.0 Vectors scores | |||
Security-Database Scoring CVSS v2
| Cvss vector : (AV:N/AC:L/Au:N/C:N/I:N/A:C) | |||
|---|---|---|---|
| Cvss Base Score | 7.8 | Attack Range | Network |
| Cvss Impact Score | 6.9 | Attack Complexity | Low |
| Cvss Expoit Score | 10 | Authentication | None Required |
| Calculate full CVSS 2.0 Vectors scores | |||
Detail
| The Cisco Internet Streamer application, part of the Cisco Content Delivery System (Cisco CDS), contains a vulnerability in its web server component that could cause the web server engine to crash when processing specially crafted URLs. Cisco has released free software updates that address this vulnerability. Workarounds that mitigate this vulnerability are not available. |
Original Source
| Url : http://www.cisco.com/warp/public/707/cisco-sa-20110525-spcdn.shtml |
CWE : Common Weakness Enumeration
| % | Id | Name |
|---|---|---|
| 100 % | CWE-399 | Resource Management Errors |
CPE : Common Platform Enumeration
| Type | Description | Count |
|---|---|---|
| Application | 3 | |
| Hardware | 1 |
Open Source Vulnerability Database (OSVDB)
| Id | Description |
|---|---|
| 72712 | Cisco Content Delivery System Internet Streamer URL Processing DoS |
