PT-2008-2747 · Cisco · Cisco Ios

Ryan Giobbi · Publicado 2008-03-26 · Atualizado 2017-09-29 · CVE-2008-1153

Positive Technologies (AI Summary)

CVSS v2.0

7.1

Alta

Vetor base

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.1 through 12.4

Description The issue allows remote attackers to cause a denial of service via a crafted IPv6 packet to the device, potentially causing the device to crash or blocking an interface. This can occur when IPv4 UDP services and the IPv6 protocol are enabled. Successful exploitation will prevent the interface from receiving any additional traffic, except for the Resource Reservation Protocol (RSVP) service, which will cause the device to crash if exploited.

Recommendations For Cisco IOS versions 12.1 through 12.4, update to a fixed software version to address this issue. As a temporary workaround, consider disabling IPv6 protocol or restricting IPv4 UDP services to minimize the risk of exploitation. Additionally, restricting access to the vulnerable interface can help mitigate the effects of the vulnerability.

Exploit

Correção

Identificadores relacionados

CVE-2008-1153

Produtos afetados

Cisco Ios

Referências · 11

• 🔥 http://cisco.com/warp/public/707/cisco-sa-20080326-IPv4IPv6.shtml · Exploit
• http://vupen.com/english/advisories/2008/1006/references · Nota
• http://securitytracker.com/id?1019713 · Nota
• http://us-cert.gov/cas/techalerts/TA08-087B.html · Nota
• http://securityfocus.com/bid/28461 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5860 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-1153 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41475 · Nota
• http://kb.cert.org/vuls/id/936177 · Nota
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20080326-IPv4IPv6 · Aviso do Fabricante
• http://secunia.com/advisories/29507 · Nota