PT-2005-1280 · Cisco · Cisco Ios

Publicado 2005-02-06 · Atualizado 2017-10-11 · CVE-2005-0197

Positive Technologies (AI Summary)

CVSS v2.0

6.1

Média

Vetor base

AV:A/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.1T, 12.2, 12.2T, 12.3, and 12.3T

Description The issue allows remote attackers to cause a denial of service, resulting in a device reload, by sending a crafted packet to a disabled interface with Multi Protocol Label Switching (MPLS) installed but not enabled.

Recommendations For Cisco IOS versions 12.1T, 12.2, 12.2T, 12.3, and 12.3T, consider disabling the MPLS feature entirely or restricting access to the disabled interface as a temporary workaround until a patch is available.

Correção

Enumeração de Fraquezas

CWE-16

Identificadores relacionados

CVE-2005-0197

Produtos afetados

Cisco Ios

Referências · 9

• http://secunia.com/advisories/14031 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-0197 · Nota de Segurança
• http://cisco.com/warp/public/707/cisco-sa-20050126-les.shtml · Aviso do Fabricante
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5662 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19071 · Nota
• http://us-cert.gov/cas/techalerts/TA05-026A.html · Correção
• http://securitytracker.com/id?1013015 · Nota
• http://kb.cert.org/vuls/id/583638 · Correção
• http://securityfocus.com/bid/12369 · Nota