PT-2005-1273 · Cisco · Cisco Ios

Publicado 2005-01-19 · Atualizado 2017-10-11 · CVE-2005-0186

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.1YD, 12.2T, 12.3 and 12.3T

Description The issue allows remote attackers to cause a denial of service, resulting in a device reboot, via a malformed packet to the SCCP port. This can be exploited repeatedly to produce a denial of service. The vulnerability is related to the processing of certain malformed control protocol messages when configured for the IOS Telephony Service, CallManager Express, or Survivable Remote Site Telephony.

Recommendations For Cisco IOS versions 12.1YD, 12.2T, 12.3 and 12.3T, apply the free software upgrades made available by Cisco to address this issue. As a temporary workaround, consider implementing workarounds available to mitigate the effects of the vulnerability.

Exploit

Correção

Identificadores relacionados

CVE-2005-0186

Produtos afetados

Cisco Ios

Referências · 7

• 🔥 http://cisco.com/warp/public/707/cisco-sa-20050119-itscme.shtml · Exploit
• http://securitytracker.com/id?1012945 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4849 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-0186 · Nota de Segurança
• http://secunia.com/advisories/13913 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/18956 · Nota
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20050119-itscme · Aviso do Fabricante