Cisco ios ssl vpn Portal overload Denial of Service Vulnerability

Release date:
Updated on:

Affected Systems:
Cisco IOS 15.2
Cisco IOS 15.1
Description:
--------------------------------------------------------------------------------
Cve id: CVE-2012-1344

Cisco IOS is an interconnected network operating system used on most Cisco system routers and network switches.

After no-client ssl vpn is configured for Cisco IOS 15.1 and 15.2, users that have been remotely verified can refresh the ssl vpn portal page through a Web browser, resulting in DOS.

<* Source: vendor

Link: http://secunia.com/advisories/50264/
Http://tools.cisco.com/security/center/viewAlert.x? AlertId = 26602
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

Cisco
-----
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://www.cisco.com/warp/public/707/advisory.html