PT-2007-5611 · Cisco · Cisco Ios

Dario Ciccarone · Publicado 2007-08-20 · Atualizado 2011-05-18 · CVE-2007-4430

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.0 through 12.4

Description The issue allows context-dependent attackers to cause a denial of service, resulting in a device restart and BGP routing table rebuild, by using certain regular expressions in a "show ip bgp regexp" command. Unauthenticated remote attacks are possible in environments with anonymous telnet and Looking Glass access.

Recommendations For Cisco IOS versions 12.0 through 12.4, consider restricting access to the "show ip bgp regexp" command to prevent unauthenticated remote attacks, and limit the use of anonymous telnet and Looking Glass access until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2007-4430

Produtos afetados

Cisco Ios

Referências · 11

• 🔥 https://exploit-db.com/exploits/30506 · Exploit
• http://secunia.com/advisories/26798 · Aviso do Fabricante
• http://vupen.com/english/advisories/2007/3136 · Aviso do Fabricante
• http://securitytracker.com/id?1018685 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-4430 · Nota de Segurança
• http://cisco.com/en/US/products/products_security_response09186a00808bb91c.html · Aviso do Fabricante
• http://heise-security.co.uk/news/94526 · Nota
• https://puck.nether.net/pipermail/cisco-nsp/2007-August/043002.html · Nota
• http://forum.cisco.com/eforum/servlet/NetProf?page=netprof&forum=Network%20Infrastructure&topic=WAN%2C%20Routing%20and%20Switching&CommCmd=MB%3Fcmd%3Ddisplay_location%26location%3D.1ddf7bc9 · Nota
• http://securityfocus.com/bid/25352 · Nota
• https://puck.nether.net/pipermail/cisco-nsp/2007-August/043010.html · Nota