Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Heap-based buffer overflow in the TFTP server capability in Cisco IOS 11.1, 11.2, and 11.3 allows remote attackers to cause a denial of service (reset) or modify configuration via a long filename.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Cisco IOS TFTP服务超长文件名远程缓冲区溢出漏洞
Vulnerability Description
Cisco路由器是CISCO公司开发的广泛使用的Internet路由器，使用Cisco IOS操作系统。 Cisco IOS内嵌的TFTP服务器在处理文件名时缺少正确的边界检查，远程攻击者可以利用这个漏洞进行缓冲区溢出攻击。 Cisco IOS内嵌的TFTP服务器没有正确检查请求文件名的长度，如果请求的文件名超过700个字节就可能导致路由器崩溃，设备重新启动，中断正常的通信。 Cisco IOS 12.0和后续的版本不存在此漏洞，Cisco分配这个BUG ID为CSCdy03429。
CVSS Information
N/A
Vulnerability Type
N/A