PT-2007-1683 · Cisco · Cisco Ios

Publicado 2007-01-11 · Atualizado 2017-10-11 · CVE-2007-0199

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 11.0 through 12.4

Description The issue allows remote attackers to cause a denial of service via an invalid value in a DLSw message during the capabilities exchange, potentially resulting in a device reload. Cisco IOS contains multiple vulnerabilities in the Data-link Switching (DLSw) feature that may result in a reload or memory leaks when processing specially crafted UDP or IP Protocol 91 packets.

Recommendations For Cisco IOS versions 11.0 through 12.4, update to a version that includes the software updates released by Cisco to address these vulnerabilities. As a temporary workaround, consider implementing workarounds available to mitigate the effects of these vulnerabilities. Restrict access to the DLSw feature to minimize the risk of exploitation. Avoid using the DLSw feature until the issue is resolved.

Correção

Identificadores relacionados

CVE-2007-0199

Produtos afetados

Cisco Ios

Referências · 9

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20080326-dlsw · Aviso do Fabricante
• http://securityfocus.com/bid/21990 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5714 · Nota
• http://vupen.com/english/advisories/2007/0139 · Nota
• http://cisco.com/warp/public/707/cisco-sa-20070110-dlsw.shtml · Aviso do Fabricante
• http://osvdb.org/32683 · Nota
• http://secunia.com/advisories/23697 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-0199 · Nota de Segurança
• http://securitytracker.com/id?1017498 · Nota