A vulnerability exists in the SISCO OSI stack. If this vulnerability is successfully exploited, an attacker could cause a denial-of-service condition.
The SISCO OSI stack is a component of the SISCO MMS-EASE, ICCP Toolkit for MMS-EASE, AX-S4 MMS and AX-S4 ICCP products. The SISCO OSI stack fails to properly handle malformed packets. A remote attacker may be able to trigger this vulnerability by sending a specially crafted series of packets to a vulnerable SISCO OSI stack installation.
Note that a valid connection is needed to trigger this vulnerability.
A remote attacker can cause the OSI stack to terminate abnormally resulting in a denial-of-service condition requiring an application using the SISCO OSI stack and the SISCO OSI stack itself to be restarted.
Upgrade or Patch accordingly
Thanks to Matthew D. Franz for researching and reporting this vulnerability.
This document was written by Jeff Gennari.
|Date First Published:||2007-01-17|
|Date Last Updated:||2007-01-26 16:54 UTC|