Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

CVE-2004-0244

Quick assessment

Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

layer 2 frame(二层帧)用于封装第三层包。Cisco 6000/6500/7600是高端路由器。 使用MSFC2设备的Cisco 6000、6500和7600路由器不正确处理部分通信,远程攻击者可以利用这个漏洞对设备进行拒绝服务攻击。 如果第二层帧实际长度和封装的第三层包不一致,就可能导致使用MSFC2设备的Cisco 6000、6500和7600路由器挂起或重设。 如果使用这种特殊的第二层帧用于封装第三层包,这种包被Cisco 6000/6500/7600系列系统路由时会触发此漏洞。不过这个

AI Predicted 5.5 Difficulty: Easy EPSS 1.10% · P63

Public Exploits 1

ExploitDB · 1 EDB-23638 [dos]
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2004-0244

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Cisco 6000, 6500, and 7600 series systems with Multilayer Switch Feature Card 2 (MSFC2) and a FlexWAN or OSM module allow local users to cause a denial of service (hang or reset) by sending a layer 2 frame packet that encapsulates a layer 3 packet, but has inconsistent length values with that packet.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Cisco IOS MSFC2畸形二层帧远程拒绝服务漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
layer 2 frame(二层帧)用于封装第三层包。Cisco 6000/6500/7600是高端路由器。 使用MSFC2设备的Cisco 6000、6500和7600路由器不正确处理部分通信,远程攻击者可以利用这个漏洞对设备进行拒绝服务攻击。 如果第二层帧实际长度和封装的第三层包不一致,就可能导致使用MSFC2设备的Cisco 6000、6500和7600路由器挂起或重设。 如果使用这种特殊的第二层帧用于封装第三层包,这种包被Cisco 6000/6500/7600系列系统路由时会触发此漏洞。不过这个
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
- n/a n/a -

II. Public POCs for CVE-2004-0244

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2004-0244

登录查看更多情报信息。

Vendor Advisories for CVE-2004-0244 (5)

Other References for CVE-2004-0244 (1)

Same Patch Batch · n/a · 2004-03-18 · 113 CVEs total

CVE-2004-0316 Avirt Soho Web Service HTTP GET缓冲区溢出漏洞
CVE-2004-0330 SolarWinds Serv-U File Server 缓冲区错误漏洞
CVE-2004-0329 FreeChat远程服务拒绝漏洞
CVE-2004-0328 Gigabyte Gn-B46B无线路由器验证绕过漏洞
CVE-2004-0327 phpNewsManager functions.php脚本文件泄露漏洞
CVE-2004-0326 Proxy-Pro Professional GateKeeper Web代理缓冲区溢出漏洞
CVE-2004-0325 TYPSoft FTP Server远程CPU耗尽服务拒绝漏洞
CVE-2004-0324 Confirm E-Mail头远程命令执行漏洞
CVE-2004-0323 XMB 安全漏洞
CVE-2004-0322 XMB Forum 安全漏洞
CVE-2004-0321 Singularity Software Team Factor整数操作内存破坏漏洞
CVE-2004-0319 EZBoard Font Tag HTML注入漏洞
CVE-2004-0318 Platform Load Sharing Facility EAuth权限提升漏洞
CVE-2004-0317 Platform Load Sharing Facility EAuth本地缓冲区溢出漏洞
CVE-2004-0302 Owl's Workshop多重远程文件泄露漏洞
CVE-2004-0305 WebCortex WebStores2000 Error.ASP跨站脚本攻击(XSS)漏洞
CVE-2004-0304 WebCortex WebStores2000 SQL注入漏洞
CVE-2004-0303 Owl's Workshop多个远程文件泄露漏洞
CVE-2004-0308 Cisco ONS平台多个安全漏洞
CVE-2004-0301 Ecommerce Corporation Online Store Kit more.php多个安全漏洞

Showing top 20 of 113 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

V. Comments for CVE-2004-0244

No comments yet


Leave a comment