PT-2009-3265 · Cisco · Cisco Ace Application Control Engine Module+3

Publicado 2009-02-26 · Atualizado 2009-03-03 · CVE-2009-0624

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco ACE Application Control Engine Module for Catalyst 6500 Switches and 7600 Routers versions prior to A2(1.3) Cisco ACE 4710 Application Control Engine Appliance versions prior to A3(2.1)

Description The issue is related to an unspecified vulnerability in the SNMPv2c implementation, allowing remote attackers to cause a denial of service (device reload) via a crafted SNMPv1 packet.

Recommendations For Cisco ACE Application Control Engine Module for Catalyst 6500 Switches and 7600 Routers versions prior to A2(1.3), update to version A2(1.3) or later. For Cisco ACE 4710 Application Control Engine Appliance versions prior to A3(2.1), update to version A3(2.1) or later.

Correção

Identificadores relacionados

CVE-2009-0624

Produtos afetados

7600 Routers

Catalyst 6500 Switches

Cisco Ace 4710 Application Control Engine Appliance

Cisco Ace Application Control Engine Module

Referências · 5

• http://cisco.com/en/US/products/products_security_advisory09186a0080a7bc82.shtml · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2009-0624 · Nota de Segurança
• http://securityfocus.com/bid/33900 · Nota
• http://securitytracker.com/id?1021769 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0624 · Nota