CVE-2007-0918

HighCVSS 7.1/10Last modified Jun 16, 2026

Description

The ATOMIC.TCP signature engine in the Intrusion Prevention System (IPS) feature for Cisco IOS 12.4XA, 12.3YA, 12.3T, and other trains allows remote attackers to cause a denial of service (IPS crash and traffic loss) via unspecified manipulations that are not properly handled by the regular expression feature, as demonstrated using the 3123.0 (Netbus Pro Traffic) signature.

Metrics

CVSS 2.0 7.1/10AV:N/AC:M/Au:N/C:N/I:N/A:C

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://osvdb.org/33053Broken Link
http://secunia.com/advisories/24142Third Party Advisory
http://www.cisco.com/en/US/products/products_security_advisory09186a00807e0a5b.shtmlVendor Advisory
http://www.cisco.com/en/US/products/products_security_response09186a00807e0a5e.htmlVendor Advisory
http://www.securityfocus.com/bid/22549Third Party Advisory, VDB Entry
http://www.securitytracker.com/id?1017631Broken Link, Third Party Advisory, VDB Entry
http://www.vupen.com/english/advisories/2007/0597Permissions Required, Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/32474Third Party Advisory, VDB Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5832Broken Link
http://osvdb.org/33053Broken Link
http://secunia.com/advisories/24142Third Party Advisory
http://www.cisco.com/en/US/products/products_security_advisory09186a00807e0a5b.shtmlVendor Advisory
http://www.cisco.com/en/US/products/products_security_response09186a00807e0a5e.htmlVendor Advisory
http://www.securityfocus.com/bid/22549Third Party Advisory, VDB Entry
http://www.securitytracker.com/id?1017631Broken Link, Third Party Advisory, VDB Entry
http://www.vupen.com/english/advisories/2007/0597Permissions Required, Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/32474Third Party Advisory, VDB Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5832Broken Link

Timeline

Published: Feb 14, 2007
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2007