CVE-2011-0949

CVSS 7.8 - HIGH

Description

Cisco IOS XR 3.6.x, 3.8.x before 3.8.3, and 3.9.x before 3.9.1 does not properly remove sshd_lock files from /tmp/, which allows remote attackers to cause a denial of service (disk consumption) by making many SSHv1 connections, aka Bug ID CSCtd64417.

Affected Products

Vendor	Product	Version
cisco	ios_xr	`3.6.0`
cisco	ios_xr	`3.6.1`
cisco	ios_xr	`3.6.2`
cisco	ios_xr	`3.6.3`
cisco	ios_xr	`3.8.0`
cisco	ios_xr	`3.8.1`
cisco	ios_xr	`3.8.2`
cisco	ios_xr	`3.9.0`

References

http://www.cisco.com/en/US/products/products_secur...

Weakness Types

CWE-399

CVE Information

CVE ID:: CVE-2011-0949
Published:: 2011-05-31
Modified:: 2026-04-29
CVSS Score:: 7.8
Severity:: HIGH
Vector:: AV:N/AC:L/Au:N/C:N/I:N/A:C

Affected Vendors

cisco

Quick Actions

View on NVD Find Similar CVEs

CVSS Severity Scale

0.0 - 3.9 LOW

4.0 - 6.9 MEDIUM

7.0 - 8.9 HIGH

9.0 - 10.0 CRITICAL