PT-2005-5122 · Cisco · Eigrp+1

Andrew A. Vladimirov · Publicado 2005-12-21 · Atualizado 2018-10-19 · CVE-2005-4437

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 11.3 and later

Description The issue concerns MD5 Neighbor Authentication in Extended Interior Gateway Routing Protocol (EIGRP) 1.2. It allows remote attackers to sniff message hashes and either replay EIGRP HELLO messages or cause a denial of service by sending a large number of spoofed EIGRP neighbor announcements. This can result in an ARP storm on the local network.

Recommendations For Cisco IOS versions 11.3 and later, consider disabling MD5 Neighbor Authentication in EIGRP as a temporary workaround until a patch is available. Restrict access to EIGRP neighbor announcements to minimize the risk of exploitation. Avoid using the affected EIGRP protocol until the issue is resolved.

Correção

Identificadores relacionados

CVE-2005-4437

Produtos afetados

Cisco Ios

Eigrp

Referências · 10

• http://securitytracker.com/id?1015382 · Nota
• http://marc.info/?l=full-disclosure&m=113504451523186&w=2 · Nota
• http://securityfocus.com/archive/1/419830/100/0/threaded · Nota
• http://securityreason.com/securityalert/274 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5741 · Nota
• http://lists.grok.org.uk/pipermail/full-disclosure/2005-December/040332.html · Aviso do Fabricante
• http://securityfocus.com/bid/15970 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-4437 · Nota de Segurança
• http://securityfocus.com/archive/1/419898/100/0/threaded · Nota
• http://vupen.com/english/advisories/2005/3008 · Nota