PT-2008-5160 · Cisco · Ubr10012+3

Publicado 2008-09-26 · Atualizado 2022-06-02 · CVE-2008-3806

Positive Technologies (AI Summary)

CVSS v2.0

8.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:C

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.0 through 12.4 on Cisco 10000, uBR10012 and uBR7200 series devices

Description The issue allows remote attackers to cause a denial of service, resulting in a device or linecard reload, by sending crafted UDP packets to 127.0.0.0/8 addresses intended for IPC communication within the device.

Recommendations For Cisco IOS versions 12.0 through 12.4 on Cisco 10000, uBR10012 and uBR7200 series devices, consider restricting access to external UDP packets sent to 127.0.0.0/8 addresses as a temporary workaround until a patch is available.

Correção

Identificadores relacionados

CVE-2008-3806

Produtos afetados

Cisco 10000

Cisco Ios

Ubr10012

Ubr7200

Referências · 6

• http://secunia.com/advisories/31990 · Nota
• http://tools.cisco.com/security/center/viewAlert.x?alertId=16646 · Aviso do Fabricante
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7123 · Nota
• http://cisco.com/en/US/products/products_security_advisory09186a0080a014ae.shtml · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/45592 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-3806 · Nota de Segurança