CVE:CVE-2000-0380
CNNVD:CNNVD-200004-074
Cisco IOS是广泛运行于Cisco系统各种网络设备中的操作系统。
多种Cisco路由器运行的IOS的HTTP管理接口实现上存在漏洞，远程攻击者可能利用此漏洞对设备进行拒绝服务攻击。
如果这些路由器启动了一个WEB服务器，用来对路由器进行管理或者其他操作的话，(通常是通过添加"ip http server "类似的命令来启动web服务的)攻击者只要提交一个URL: http://victim.router/%% ，就能导致路由器崩溃。有些路由器会自动重起，有的则必须手工关闭电源并启动才能使路由器恢复正常工作。
solution:Upgrade cisco ios to a higher version than 11.1,11.2,11.2(4f1,11.2(8,11.2(8p,11.2(9p,11.2(9xa,11.2(10,11.2(10bc,11.2(17,11.2p,11.3,11.3(1,11.3(1ed,11.3(1t,11.3t,12.0,12.0(1w,12.0(1xa3,12.0(1xb,12.0(1xe,12.0(2,12.0(2xc,12.0(2xd,12.0(2xf,12.0(2xg,12.0(3t2,12.0(4,12.0(4s,12.0(4t,12.0(5,12.0(5t1,12.0(6,12.0(7t,12.0(8,12.0(9s,12.0db,12.0s,12.0t,and avoid the version 11.1,11.2,11.2(4)f1,11.2(8),11.2(8)p,11.2(9)p,11.2(9)xa,11.2(10),11.2(10)bc,11.2(17),11.2p,11.3,11.3(1),11.3(1)ed,11.3(1)t,11.3t,12.0,12.0(1)w,12.0(1)xa3,12.0(1)xb,12.0(1)xe,12.0(2),12.0(2)xc,12.0(2)xd,12.0(2)xf,12.0(2)xg,12.0(3)t2,12.0(4),12.0(4)s,12.0(4)t,12.0(5),12.0(5)t1,12.0(6),12.0(7)t,12.0(8),12.0(9)s,12.0db,12.0s,12.0t