PT-2002-3027 · Cisco · Cisco Ios

Publicado 2002-12-31 · Atualizado 2008-09-05 · CVE-2002-2315

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions: Cisco IOS versions 11.2.x through 12.0.x

Description: The issue allows remote attackers to cause a denial of service due to memory consumption via spoofed ICMP redirect packets to the router. This occurs because the software does not limit the size of its redirect table.

Recommendations: For versions 11.2.x through 12.0.x, consider implementing measures to limit the impact of ICMP redirect packets, such as restricting access to the router or configuring it to ignore spoofed ICMP redirects. As a temporary workaround, consider configuring the router to reduce the size of its redirect table until a more permanent solution is available.

Exploit

Correção

Identificadores relacionados

CVE-2002-2315

Produtos afetados

Cisco Ios

Referências · 6

• 🔥 http://securityfocus.com/bid/4786 · Exploit
• 🔥 https://exploit-db.com/exploits/21465 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2002-2315 · Nota de Segurança
• http://online.securityfocus.com/archive/1/273488 · Nota
• http://iss.net/security_center/static/9129.php · Nota
• http://online.securityfocus.com/archive/1/273421 · Nota