>> Cisco IOS Regular Expression Processing Denial of Service Vulnerability
Title : Cisco IOS Regular Expression Processing Denial of Service Vulnerability VUPEN ID : VUPEN/ADV-2007-3136 CVE ID : GENERIC-MAP-NOMATCH
Rated as : Low Risk
Remotely Exploitable : Yes Locally Exploitable : Yes Release Date : 2007-09-13
Technical Description
A vulnerability has been identified in Cisco IOS, which could be exploited by malicious users to cause a denial of service. This issue is caused by an error in the regular expression engine when processing specially crafted regular expressions provided as part of a command, which could be exploited by authenticated attackers to crash or reload and affected device, leading to a denial of service condition.