CVE-2007-2813

Cisco IOS 12.4 and earlier, when using the crypto packages and SSL support is enabled, allows remote attackers to cause a denial of service via a malformed (1) ClientHello, (2) ChangeCipherSpec, or (3) Finished message during an SSL session.

Date published : 2007-05-22

http://www.securityfocus.com/bid/24097

http://www.cisco.com/en/US/products/products_security_advisory09186a0080847c49.shtml