The following was released a while ago but I don't think it hurts to be reminded
again. The entire text can be found at
http://www.cisco.com/warp/public/707/ioshttpserver-pub.shtml and reads in part:
"A defect in multiple releases of Cisco IOS software will cause a Cisco router
or switch to halt and reload if the IOS HTTP
service is enabled and browsing to "http://<router-ip>/%%" is attempted. This
defect can be exploited to produce a
denial of service (DoS) attack. This defect has been discussed on public mailing
lists and should be considered public
information"
The 2600 is on the list of affected systems.
Warwick
Jon H Bovre wrote:
> Hi
>
> I have attached config from my 2611 router with ip http server configured.
>
> Do you have any access-list configured?
> Is your browser correct configured? Could be it is going directly to a
> proxy.
> Check routing table in computer. (ROUTE PRINT in Win NT)
>
> Jon
>
> Cisco2611#sh ver
> Cisco Internetwork Operating System Software
> IOS (tm) C2600 Software (C2600-I-M), Version 11.3(4)T1, RELEASE SOFTWARE
> (fc1)
> Copyright (c) 1986-1998 by cisco Systems, Inc.
> Compiled Wed 01-Jul-98 11:48 by phanguye
> Image text-base: 0x80008084, data-base: 0x80552544
>
> ROM: System Bootstrap, Version 11.3(2)XA3, PLATFORM SPECIFIC RELEASE
> SOFTWARE (f
> c1)
>
> Cisco2611 uptime is 1 week, 6 days, 5 hours, 50 minutes
> System restarted by reload at 08:17:27 UTC Wed Aug 2 2000
> System image file is "flash:c2600-i-mz.113-4.T1", booted via flash
>
> cisco 2611 (MPC860) processor (revision 0x202) with 12288K/4096K bytes of
> memory
> .
> Processor board ID JAB02380CVM (3630199001)
> M860 processor: part number 0, mask 32
> Bridging software.
> X.25 software, Version 3.0.0.
> 2 Ethernet/IEEE 802.3 interface(s)
> 1 Serial network interface(s)
> 32K bytes of non-volatile configuration memory.
> 4096K bytes of processor board System flash (Read/Write)
>
> Configuration register is 0x2102
>
> Cisco2611#conf t
> Enter configuration commands, one per line. End with CNTL/Z.
> Cisco2611(config)#ip http server
> Cisco2611(config)#^Z
>
> Cisco2611#sh runn
> Building configuration...
>
> Current configuration:
> !
> ! Last configuration change at 13:34:16 UTC Tue Aug 15 2000
> ! NVRAM config last updated at 14:12:13 UTC Mon Aug 14 2000
> !
> version 11.3
> no service password-encryption
> !
> hostname Cisco2611
> router eigrp 10
> network 177.176.0.0
> network 177.177.0.0
> no auto-summary
> !
> ip http server
> ip classless
> no logging console
>
> end
> +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
> Bilge Karabacak <[EMAIL PROTECTED]> wrote in message
> [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> > ip http server does not work.
> > I scanned the ports of the router. The open ports are 23 and 79. Router is
> > directly connected to pc via a cross cable. what is the global config?
> > Saying again:
> > My router is cisco 2621. IOS software is C2600 Software
> > (C2600-IO3S56I-M), Version 12.0(7)XK1, EARLY DEPLOYMENT RELEASE SOFTWARE
> > (fc1)
> >
> >
> >
> > Eric Long wrote:
> >
> > > ip http server
> > >
> > > -----Original Message-----
> > > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
> > > Bilge Karabacak
> > > Sent: Tuesday, August 15, 2000 6:30 AM
> > > To: [EMAIL PROTECTED]
> > > Subject: Port 80
> > >
> > > Hello everbody,
> > > What is the command to enable the HTTP server on the router? This is an
> > > old question, but the command 'ip http server' does not work.
> > > My router is cisco 2621. IOS software is C2600 Software
> > > (C2600-IO3S56I-M), Version 12.0(7)XK1, EARLY DEPLOYMENT RELEASE SOFTWARE
> > > (fc1)
> > > Please help.
> > >
> > > ___________________________________
> > > UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> > > FAQ, list archives, and subscription info: http://www.groupstudy.com
> > > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> >
> > ___________________________________
> > UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> > FAQ, list archives, and subscription info: http://www.groupstudy.com
> > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> > ---
>
> ___________________________________
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
___________________________________
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
