PT-2006-5435 · Cisco · Cisco Ios

Fx · Publicado 2006-09-09 · Atualizado 2018-10-17 · CVE-2006-4650

Positive Technologies (AI Summary)

CVSS v2.0

2.6

Baixa

Vetor base

AV:N/AC:H/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.0 through 12.2

Description The issue occurs when GRE IP tunneling is used without the RFC2784 compliance fixes, leading to a failure in verifying the offset field of a GRE packet during decapsulation. This results in an integer overflow that references data from incorrect memory locations, allowing remote attackers to inject crafted packets into the routing queue. This could potentially bypass intended router ACLs.

Recommendations For Cisco IOS versions 12.0 through 12.2, apply the RFC2784 compliance fixes to ensure proper verification of the offset field in GRE packets.

Correção

Identificadores relacionados

CVE-2006-4650

Produtos afetados

Cisco Ios

Referências · 12

• http://securitytracker.com/id?1016799 · Nota
• http://securityfocus.com/archive/1/445322/100/0/threaded · Nota
• http://phenoelit.de/stuff/CiscoGRE.txt · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2006-4650 · Nota de Segurança
• http://securityreason.com/securityalert/1526 · Nota
• http://securityfocus.com/bid/19878 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/28786 · Nota
• http://cisco.com/en/US/tech/tk827/tk369/tsd_technology_security_response09186a008072cd7b.html · Aviso do Fabricante
• http://vupen.com/english/advisories/2006/3502 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5713 · Nota
• http://secunia.com/advisories/21783 · Nota
• http://osvdb.org/28590 · Nota