PT-2005-3360 · Cisco · Cisco Ios Xr+1

Publicado 2005-07-29 · Atualizado 2017-10-11 · CVE-2005-2451

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.0 through 12.4 Cisco IOS XR versions prior to 3.2

Description The issue allows remote attackers on a local network segment to cause a denial of service (device reload) and possibly execute arbitrary code via a crafted IPv6 packet. Only devices that have been explicitly configured to process IPv6 traffic are affected. Upon successful exploitation, the device may reload or be open to further exploitation.

Recommendations For Cisco IOS versions 12.0 through 12.4, update to a version that addresses this vulnerability. For Cisco IOS XR versions prior to 3.2, update to version 3.2 or later. As a temporary workaround, consider disabling IPv6 traffic processing on affected devices until a patch is available.

Correção

Identificadores relacionados

CVE-2005-2451

Produtos afetados

Cisco Ios

Cisco Ios Xr

Referências · 12

• http://secunia.com/advisories/16272 · Nota
• http://kb.cert.org/vuls/id/930892 · Nota
• http://securityfocus.com/bid/14414 · Nota
• http://us-cert.gov/cas/techalerts/TA05-210A.html · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/21591 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-2451 · Nota de Segurança
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20050729-ipv6 · Aviso do Fabricante
• http://osvdb.org/18332 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5445 · Nota
• http://archives.neohapsis.com/archives/fulldisclosure/2005-07/0663.html · Nota
• http://securitytracker.com/id?1014598 · Nota
• http://cisco.com/warp/public/707/cisco-sa-20050729-ipv6.shtml · Aviso do Fabricante