PT-2007-2679 · Cisco · Cisco Catalyst 6500+1

Publicado 2007-02-28 · Atualizado 2017-10-11 · CVE-2007-1258

Positive Technologies (AI Summary)

CVSS v2.0

6.1

Média

Vetor base

AV:A/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.2SXA, SXB, SXD, and SXF

Description The issue allows remote attackers on a local network segment to cause a denial of service (software reload) via a certain MPLS packet. This affects Cisco Catalyst 6500 series systems running certain versions of Cisco Internetwork Operating System (IOS) in Hybrid Mode or with Cisco IOS Software Modularity. MPLS packets can only be sent from the local network segment.

Recommendations For Cisco IOS versions 12.2SXA, SXB, SXD, and SXF, consider restricting access to the local network segment to minimize the risk of exploitation. As a temporary workaround, consider disabling the handling of MPLS packets on affected systems until a patch is available.

Correção

Identificadores relacionados

CVE-2007-1258

Produtos afetados

Cisco Catalyst 6500

Cisco Ios

Referências · 9

• http://secunia.com/advisories/24348 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2007-1258 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/32748 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5869 · Nota
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20070228-mpls · Aviso do Fabricante
• http://securitytracker.com/id?1017709 · Nota
• http://vupen.com/english/advisories/2007/0782 · Nota
• http://cisco.com/warp/public/707/cisco-sa-20070228-mpls.shtml · Aviso do Fabricante
• http://osvdb.org/33067 · Nota