Cisco Router : Buffer Overflow...

[psykokwak]

Hello,

I would like to inform you I found a buffer overflow on your cisco routers with webvpn enabled. it crashs the router..

its produced when I sent a very long Content-Length in https request header.

I've tryed it on a c1800 with : Cisco IOS Software, C180X Software (C180X-ADVENTERPRISEK9-M), Version 12.4(9)T

Sorry for my bad english.

Regards.

[sachinraja]

Hello mate,

I guess you are hitting the caveat CSCsd97829 on the 12.4 platforms. This seems an open caveat and will probably fixed in the next release of the IOS. I dont think there is any workaround for this problem. Best thing to do is not to enable SSL VPN on this router. Have a look at the release notes:

http://cisco.com/en/US/products/ps6441/prod_release_note09186a00805e291f.html#wp1808277

You can also open a tac, if needed, and see how/when they are going to fix this issue.

Hope this helps. all the best. rate replies if found useful.

Raj