CVE-2007-0918

HighCVSS 7.1/10Last modified Jun 16, 2026

Description

The ATOMIC.TCP signature engine in the Intrusion Prevention System (IPS) feature for Cisco IOS 12.4XA, 12.3YA, 12.3T, and other trains allows remote attackers to cause a denial of service (IPS crash and traffic loss) via unspecified manipulations that are not properly handled by the regular expression feature, as demonstrated using the 3123.0 (Netbus Pro Traffic) signature.

Metrics

CVSS 2.0 7.1/10AV:N/AC:M/Au:N/C:N/I:N/A:C

Affected software

No affected versions have been published.

Timeline

Published
Feb 14, 2007
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2007

CVE-2007-09197.8Directory traversal vulnerability in Nickolas Grigoriadis Mini Web server (MiniWebsvr) 0.0.6 allows remote attackers to list the directory iCVE-2007-09207.5SQL injection vulnerability in philboard_forum.asp in Philboard 1.14 and earlier allows remote attackers to execute arbitrary SQL commands vCVE-2007-09219.4Portal Search allows remote attackers to redirect a URL to an arbitrary web site by placing the URL in the query string to the top-level URICVE-2007-09224.3Cross-site scripting (XSS) vulnerability in buscador/buscador.htm in Portal Search allows remote attackers to inject arbitrary web script orCVE-2007-09237.8buscador/buscador.htm in Portal Search allows remote attackers to obtain sensitive information (business logic) via a query string composed CVE-2007-09247.5Till Gerken phpPolls 1.0.3 allows remote attackers to bypass authentication and perform certain administrative actions via a direct request CVE-2007-09254.3Cross-site scripting (XSS) vulnerability in search/SearchResults.aspx in Community Server allows remote attackers to inject arbitrary web scCVE-2007-09267.5The dologin function in guestbook.php in KvGuestbook 1.0 Beta allows remote attackers to gain administrative privileges, probably via modifiCVE-2007-09277.5Heap-based buffer overflow in uTorrent 1.6 allows remote attackers to execute arbitrary code via a torrent file with a crafted announce headCVE-2007-09285.0Virtual Calendar stores sensitive information under the web root with insufficient access control, which allows remote attackers to downloadCVE-2007-09295.0Directory traversal vulnerability in php rrd browser before 0.2.1 allows remote attackers to read arbitrary files via ".." sequences in the CVE-2007-09307.5Variable extract vulnerability in Apache Stats before 0.0.3beta allows attackers to modify arbitrary variables and conduct attacks via unkno
CVE-2007-0918: High severity, CVSS 7.1 | Vulnix