PT-2006-1412 · Cisco · Cisco Ios

Publicado 2006-01-21 · Atualizado 2017-07-20 · CVE-2006-0340

Positive Technologies (AI Summary)

CVSS v2.0

7.1

Alta

Vetor base

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.0 through 12.4

Description The issue affects Cisco IOS when SGBP is enabled, allowing remote attackers on the local network to cause a denial of service, resulting in device hang and network traffic loss, via a crafted UDP packet to port 9900, which is the "API Endpoint: port 9900".

Recommendations For Cisco IOS versions 12.0 through 12.4, consider disabling SGBP support as a temporary workaround until a patch is available. Restrict access to port 9900 to minimize the risk of exploitation.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2006-0340

Produtos afetados

Cisco Ios

Referências · 9

• http://vupen.com/english/advisories/2006/0248 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-0340 · Nota de Segurança
• http://cisco.com/warp/public/707/cisco-sa-20060118-sgbp.shtml · Aviso do Fabricante
• http://securityreason.com/securityalert/358 · Nota
• http://securityfocus.com/bid/16303 · Nota
• http://secunia.com/advisories/18490 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24182 · Nota
• http://osvdb.org/22624 · Nota
• http://securitytracker.com/id?1015501 · Correção