CVE-2004-1111

Published: Jan 10, 2005Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Cisco IOS 2.2(18)EW, 12.2(18)EWA, 12.2(14)SZ, 12.2(18)S, 12.2(18)SE, 12.2(18)SV, 12.2(18)SW, and other versions without the "no service dhcp" command, keep undeliverable DHCP packets in the queue instead of dropping them, which allows remote attackers to cause a denial of service (dropped traffic) via multiple undeliverable DHCP packets that exceed the input queue size.

Affected (17)

Products: Cisco: Ios, Multiservice Platform 2650, Multiservice Platform 2650xm, Multiservice Platform 2651, Multiservice Platform 2651xm, 7200 Router, 7300 Router, 7500 Router, 7600 Router, Catalyst 7600

Cisco

10 products

Ios

Multiservice Platform 2650

Multiservice Platform 2650xm

Multiservice Platform 2651

Multiservice Platform 2651xm

Configuration A

12 vulnerable

Vulnerable Software	Affected Versions
Cisco Ios	Version 12.2(14)sz
Cisco Ios	Version 12.2(18)ew
Cisco Ios	Version 12.2(18)ewa
Cisco Ios	Version 12.2(18)s
Cisco Ios	Version 12.2(18)se
Cisco Ios	Version 12.2(18)sv
Cisco Ios	Version 12.2(18)sw
Cisco Ios	Version 12.2(20)ew
Cisco Multiservice Platform 2650	All versions
Cisco Multiservice Platform 2650xm	All versions
Cisco Multiservice Platform 2651	All versions
Cisco Multiservice Platform 2651xm	All versions