PT-2005-5121 · Cisco · Eigrp+1

Andrew A. Vladimirov + 1 · Publicado 2005-12-21 · Atualizado 2018-10-19 · CVE-2005-4436

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco IOS versions after 12.3(2), 12.3(3)B, and 12.3(2)T Extended Interior Gateway Routing Protocol (EIGRP) version 1.2

Description The issue allows remote attackers to cause a denial of service by sending a spoofed neighbor announcement with either mismatched k values or a goodbye message Type-Length-Value (TLV).

Recommendations For Cisco IOS versions after 12.3(2), 12.3(3)B, and 12.3(2)T, consider restricting access to the EIGRP protocol to minimize the risk of exploitation. For Extended Interior Gateway Routing Protocol (EIGRP) version 1.2, avoid using the protocol until the issue is resolved or apply configuration changes to prevent spoofed neighbor announcements. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2005-4436

Produtos afetados

Cisco Ios

Eigrp

Referências · 8

• http://securityfocus.com/bid/15978 · Nota
• http://securitytracker.com/id?1015382 · Nota
• http://lists.grok.org.uk/pipermail/full-disclosure/2005-December/040330.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2005-4436 · Nota de Segurança
• http://marc.info/?l=full-disclosure&m=113504451523186&w=2 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5454 · Nota
• http://securityfocus.com/archive/1/419898/100/0/threaded · Nota
• http://vupen.com/english/advisories/2005/3008 · Nota