Cisco CDS Internet Streamer Web Server Remote Denial of Service Vulnerability

Release date:
Affected Versions:
Cisco Content Delivery System 2.5.9
Cisco Content Delivery System 2.5.7 vulnerability description:
Bugtraq ID: 47979
Cve id: CVE-2011-1649

Cisco Content Delivery System is a Content Delivery System solution developed by Cisco.

A Cisco Internet Streamer application is a component of Cisco CDS. Its WEB server has a security vulnerability. When a specific URL is parsed, the WEB server engine crashes.

Unverified attackers can exploit this vulnerability to launch DoS attacks on WEB servers running on the service engine. The device continues to work and the WEB engine restarts after the attack.

<* Reference
Http://www.cisco.com/warp/public/707/cisco-sa-20110525-spcdn.shtml
*>

Vendor solutions
You can obtain the patch information by referring to the Security announcements provided by the following vendors:
Http://www.cisco.com/warp/public/707/cisco-sa-20110525-spcdn.shtml