PT-2009-3275 · Cisco · Cisco Ios

Publicado 2009-03-25 · Atualizado 2017-09-29 · CVE-2009-0634

Positive Technologies (AI Summary)

CVSS v2.0

7.1

Alta

Vetor base

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.3 through 12.4

Description The issue affects the home agent implementation in the Mobile IP NAT Traversal feature and the Mobile IPv6 subsystem, allowing remote attackers to cause a denial of service via an ICMP packet. Devices running Cisco IOS Software and configured for Mobile IP Network Address Translation (NAT) Traversal feature or Mobile IPv6 are vulnerable to a denial of service attack that may result in a blocked interface.

Recommendations For Cisco IOS versions 12.3 through 12.4, update to a version that includes the software updates released by Cisco to address these vulnerabilities. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2009-0634

Produtos afetados

Cisco Ios

Referências · 11

• http://vupen.com/english/advisories/2009/0851 · Aviso do Fabricante
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20090325-mobileip · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2009-0634 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/49585 · Nota
• http://secunia.com/advisories/34438 · Aviso do Fabricante
• http://securitytracker.com/id?1021898 · Nota
• http://cisco.com/en/US/products/products_security_advisory09186a0080a90469.shtml · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/49424 · Nota
• http://securityfocus.com/bid/34241 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12043 · Nota
• http://cisco.com/en/US/products/products_security_advisory09186a0080a9042f.shtml · Aviso do Fabricante