CVE-2002-0886

Published: Oct 4, 2002Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Cisco DSL CPE devices running CBOS 2.4.4 and earlier allows remote attackers to cause a denial of service (hang or memory consumption) via (1) a large packet to the DHCP port, (2) a large packet to the Telnet port, or (3) a flood of large packets to the CPE, which causes the TCP/IP stack to consume large amounts of memory.

Affected (21)

Products: Cisco: Cbos

Cisco

1 product

Cbos

Configuration A

21 vulnerable

Vulnerable Software	Affected Versions
Cisco Cbos	Version 2.0.1
Cisco Cbos	Version 2.1.0
Cisco Cbos	Version 2.1.0a
Cisco Cbos	Version 2.2.0
Cisco Cbos	Version 2.2.1
Cisco Cbos	Version 2.2.1a
Cisco Cbos	Version 2.3.2
Cisco Cbos	Version 2.3.5.015
Cisco Cbos	Version 2.3.5
Cisco Cbos	Version 2.3.7.002
Cisco Cbos	Version 2.3.7
Cisco Cbos	Version 2.3.8
Cisco Cbos	Version 2.3.9
Cisco Cbos	Version 2.3
Cisco Cbos	Version 2.3_.053
Cisco Cbos	Version 2.4.1
Cisco Cbos	Version 2.4.2
Cisco Cbos	Version 2.4.2ap
Cisco Cbos	Version 2.4.2b
Cisco Cbos	Version 2.4.3
Cisco Cbos	Version 2.4.4