PT-2008-5159 · Cisco · Ubr10012+3

Publicado 2008-09-26 · Atualizado 2022-06-02 · CVE-2008-3805

Positive Technologies (AI Summary)

CVSS v2.0

8.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:C

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.0 through 12.4 on Cisco 10000, uBR10012 and uBR7200 series devices

Description The issue allows remote attackers to cause a denial of service, resulting in a device or linecard reload, by sending crafted UDP packets to 127.0.0.0/8 addresses intended for IPC communication within the device.

Recommendations For Cisco IOS versions 12.0 through 12.4 on Cisco 10000, uBR10012 and uBR7200 series devices, consider restricting access to external UDP packets to minimize the risk of exploitation. As a temporary workaround, restrict the handling of external UDP packets sent to 127.0.0.0/8 addresses until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2008-3805

Produtos afetados

Cisco 10000

Cisco Ios

Ubr10012

Ubr7200

Referências · 7

• https://nvd.nist.gov/vuln/detail/CVE-2008-3805 · Nota de Segurança
• http://secunia.com/advisories/31990 · Nota
• http://vupen.com/english/advisories/2008/2670 · Nota
• http://tools.cisco.com/security/center/viewAlert.x?alertId=16646 · Aviso do Fabricante
• http://cisco.com/en/US/products/products_security_advisory09186a0080a014ae.shtml · Aviso do Fabricante
• http://securitytracker.com/id?1020935 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5910 · Nota