CVEvulnerability

CVE-2007-0918

7.1 HIGH Published 2007-02-14 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2007-02-14
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.1 HIGH — AV:N/AC:M/Au:N/C:N/I:N/A:C

Description

The ATOMIC.TCP signature engine in the Intrusion Prevention System (IPS) feature for Cisco IOS 12.4XA, 12.3YA, 12.3T, and other trains allows remote attackers to cause a denial of service (IPS crash and traffic loss) via unspecified manipulations that are not properly handled by the regular expression feature, as demonstrated using the 3123.0 (Netbus Pro Traffic) signature.

Affected configurations

• cisco ios 12.3t • cisco ios 12.3xq • cisco ios 12.3xr • cisco ios 12.3xs • cisco ios 12.3xw • cisco ios 12.3xx • cisco ios 12.3xy • cisco ios 12.3ya • cisco ios 12.3yd • cisco ios 12.3yg • cisco ios 12.3yh • cisco ios 12.3yi • cisco ios 12.3yj • cisco ios 12.3yk • cisco ios 12.3ym • cisco ios 12.3yq • cisco ios 12.3ys • cisco ios 12.3yt • cisco ios 12.3yx • cisco ios 12.3yz • cisco ios 12.4 • cisco ios 12.4mr • cisco ios 12.4t • cisco ios 12.4xa • cisco ios 12.4xb

References