CVE-2002-1557

Cisco ONS15454 and ONS15327 running ONS before 3.4 allows attackers to cause a denial of service (reset to TCC, TCC+, TCCi or XTC) via a malformed HTTP request that does not contain a leading / (slash) character.

Published: Mar 31, 2003
Updated: Apr 13, 2023
CVE: CVE-2002-1557
Severity: Medium
Exploit:

CVSS v2:

Severity: Medium
Score: 5
AV:N/AC:L/Au:N/C:N/I:N/A:P

No CWE or OWASP classifications available.

Affected Software
References

Software	From	Fixed in
cisco / optical_networking_systems_software	3.2	3.2.x
cisco / optical_networking_systems_software	3.3.0	3.3.0.x
cisco / optical_networking_systems_software	3.1.0	3.1.0.x
cisco / optical_networking_systems_software	3.2.0	3.2.0.x
cisco / optical_networking_systems_software	3.0	3.0.x

http://www.cisco.com/warp/public/707/ons-multiple-vuln-pub.shtml
http://www.iss.net/security_center/static/10509.php
http://www.securityfocus.com/bid/6082

Vulnerability Database

289,697

CVE-2002-1557