Sign-up

ID

VAR-200407-0043


CVE

CVE-2004-0710


TITLE

Cisco IPsec VPNSM vulnerable to DoS via malformed IKE packet

Trust: 0.8

sources: CERT/CC: VU#904310

DESCRIPTION

IP Security VPN Services Module (VPNSM) in Cisco Catalyst 6500 Series Switch and the Cisco 7600 Series Internet Routers running IOS before 12.2(17b)SXA, before 12.2(17d)SXB, or before 12.2(14)SY03 could allow remote attackers to cause a denial of service (device crash and reload) via a malformed Internet Key Exchange (IKE) packet. A vulnerability in a Cisco VPN module can allow a remote attacker to cause a denial-of-service to the device in which the module is installed. Cisco IOS has been reported prone to a remote denial of service vulnerability. When one of the aforementioned appliances processes a malformed IKE packet, IOS will crash and reload. It is reported that Cisco IOS devices with Crypto support will process IKE messages by default. Cisco IOS is a very widely deployed network operating system. Many Cisco devices run IOS

Trust: 2.7

sources: NVD: CVE-2004-0710 // CERT/CC: VU#904310 // JVNDB: JVNDB-2004-000114 // BID: 10083 // VULHUB: VHN-9140

AFFECTED PRODUCTS

vendor:ciscomodel:iosscope:eqversion:12.2sxa

Trust: 1.6

vendor:ciscomodel:iosscope:eqversion:12.2\(14\)za

Trust: 1.6

vendor:ciscomodel:iosscope:eqversion:12.2\(17a\)sxa

Trust: 1.6

vendor:ciscomodel:iosscope:eqversion:12.2sy

Trust: 1.6

vendor:ciscomodel:iosscope:eqversion:12.2za

Trust: 1.6

vendor:ciscomodel:iosscope:eqversion:12.2\(14\)za2

Trust: 1.6

vendor:ciscomodel:iosscope:eqversion:12.2sxb

Trust: 1.6

vendor:ciscomodel:iosscope:eqversion:12.2\(14\)sy

Trust: 1.6

vendor:ciscomodel: - scope: - version: -

Trust: 0.8

vendor:ciscomodel:iosscope:eqversion:12.2

Trust: 0.8

vendor:ciscomodel:ios 12.2zascope: - version: -

Trust: 0.3

vendor:ciscomodel:ios 12.2syscope: - version: -

Trust: 0.3

vendor:ciscomodel:ios 12.2sxbscope: - version: -

Trust: 0.3

vendor:ciscomodel:ios 12.2sxascope: - version: -

Trust: 0.3

vendor:ciscomodel:ios 12.2 sxscope: - version: -

Trust: 0.3

vendor:ciscomodel:ios 12.2 sxascope: - version: -

Trust: 0.3

vendor:ciscomodel:ios 12.2 za2scope: - version: -

Trust: 0.3

vendor:ciscomodel:ios 12.2 zascope: - version: -

Trust: 0.3

vendor:ciscomodel:ios 12.2 syscope: - version: -

Trust: 0.3

vendor:ciscomodel:ios 12.2 sxbscope:neversion: -

Trust: 0.3

vendor:ciscomodel:ios 12.2 sxascope:neversion: -

Trust: 0.3

vendor:ciscomodel:ios 12.2 za8scope:neversion: -

Trust: 0.3

vendor:ciscomodel:ios 12.2 sy03scope:neversion: -

Trust: 0.3

sources: CERT/CC: VU#904310 // BID: 10083 // JVNDB: JVNDB-2004-000114 // CNNVD: CNNVD-200407-073 // NVD: CVE-2004-0710

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2004-0710
value: MEDIUM

Trust: 1.0

CARNEGIE MELLON: VU#904310
value: 8.10

Trust: 0.8

NVD: CVE-2004-0710
value: MEDIUM

Trust: 0.8

CNNVD: CNNVD-200407-073
value: MEDIUM

Trust: 0.6

VULHUB: VHN-9140
value: MEDIUM

Trust: 0.1

nvd@nist.gov: CVE-2004-0710
severity: MEDIUM
baseScore: 5.0
vectorString: AV:N/AC:L/AU:N/C:N/I:N/A:P
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: PARTIAL
exploitabilityScore: 10.0
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.8

VULHUB: VHN-9140
severity: MEDIUM
baseScore: 5.0
vectorString: AV:N/AC:L/AU:N/C:N/I:N/A:P
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: PARTIAL
exploitabilityScore: 10.0
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

sources: CERT/CC: VU#904310 // VULHUB: VHN-9140 // JVNDB: JVNDB-2004-000114 // CNNVD: CNNVD-200407-073 // NVD: CVE-2004-0710

PROBLEMTYPE DATA

problemtype:NVD-CWE-Other

Trust: 1.0

sources: NVD: CVE-2004-0710

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-200407-073

TYPE

other

Trust: 0.6

sources: CNNVD: CNNVD-200407-073

CONFIGURATIONS

sources:
            
            
            JVNDB: JVNDB-2004-000114

PATCH
title:cisco-sa-20040408-vpnsmurl:http://www.cisco.com/warp/public/707/cisco-sa-20040408-vpnsm.shtml
Trust: 0.8
sources:
            
            
            JVNDB: JVNDB-2004-000114

EXTERNAL IDS
db:CERT/CCid:VU#904310
Trust: 3.3
db:NVDid:CVE-2004-0710
Trust: 2.8
db:BIDid:10083
Trust: 2.8
db:JVNDBid:JVNDB-2004-000114
Trust: 0.8
db:CNNVDid:CNNVD-200407-073
Trust: 0.7
db:OVALid:OVAL:ORG.MITRE.OVAL:DEF:5696
Trust: 0.6
db:XFid:15797
Trust: 0.6
db:CISCOid:20040408 CISCO IPSEC VPN SERVICES MODULE MALFORMED IKE PACKET VULNERABILITY
Trust: 0.6
db:VULHUBid:VHN-9140
Trust: 0.1
sources:
            
            
            CERT/CC: VU#904310 // 
            
            
            
            VULHUB: VHN-9140 // 
            
            
            
            BID: 10083 // 
            
            
            
            JVNDB: JVNDB-2004-000114 // 
            
            
            
            CNNVD: CNNVD-200407-073 // 
            
            
            
            NVD: CVE-2004-0710

REFERENCES
url:http://www.securityfocus.com/bid/10083
Trust: 2.5
url:http://www.kb.cert.org/vuls/id/904310
Trust: 2.5
url:http://www.cisco.com/warp/public/707/cisco-sa-20040408-vpnsm.shtml
Trust: 2.0
url:https://oval.cisecurity.org/repository/search/definition/oval%3aorg.mitre.oval%3adef%3a5696
Trust: 1.1
url:https://exchange.xforce.ibmcloud.com/vulnerabilities/15797
Trust: 1.1
url:about vulnerability notes
Trust: 0.8
url:contact us about this vulnerability
Trust: 0.8
url:provide a vendor statement
Trust: 0.8
url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2004-0710
Trust: 0.8
url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2004-0710
Trust: 0.8
url:http://xforce.iss.net/xforce/xfdb/15797
Trust: 0.6
url:http://oval.mitre.org/repository/data/getdef?id=oval:org.mitre.oval:def:5696
Trust: 0.6
sources:
            
            
            CERT/CC: VU#904310 // 
            
            
            
            VULHUB: VHN-9140 // 
            
            
            
            BID: 10083 // 
            
            
            
            JVNDB: JVNDB-2004-000114 // 
            
            
            
            CNNVD: CNNVD-200407-073 // 
            
            
            
            NVD: CVE-2004-0710

CREDITS
Cisco Security bulletin
Trust: 0.6
sources:
            
            
            CNNVD: CNNVD-200407-073

SOURCES
db:CERT/CCid:VU#904310
db:VULHUBid:VHN-9140
db:BIDid:10083
db:JVNDBid:JVNDB-2004-000114
db:CNNVDid:CNNVD-200407-073
db:NVDid:CVE-2004-0710

LAST UPDATE DATE
2025-04-03T22:24:07.761000+00:00

SOURCES UPDATE DATE
db:CERT/CCid:VU#904310date:2004-06-15T00:00:00
db:VULHUBid:VHN-9140date:2017-10-11T00:00:00
db:BIDid:10083date:2009-07-12T04:06:00
db:JVNDBid:JVNDB-2004-000114date:2007-04-01T00:00:00
db:CNNVDid:CNNVD-200407-073date:2009-03-04T00:00:00
db:NVDid:CVE-2004-0710date:2025-04-03T01:03:51.193

SOURCES RELEASE DATE
db:CERT/CCid:VU#904310date:2004-06-09T00:00:00
db:VULHUBid:VHN-9140date:2004-07-27T00:00:00
db:BIDid:10083date:2004-04-08T00:00:00
db:JVNDBid:JVNDB-2004-000114date:2007-04-01T00:00:00
db:CNNVDid:CNNVD-200407-073date:2004-04-08T00:00:00
db:NVDid:CVE-2004-0710date:2004-07-27T04:00:00