PT-2009-5228 · Cisco · Cisco Ios

Publicado 2009-09-23 · Atualizado 2009-10-01 · CVE-2009-2870

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.2 through 12.4

Description A vulnerability exists in the Session Initiation Protocol (SIP) implementation in Cisco IOS Software, allowing an unauthenticated attacker to cause a denial of service (DoS) condition on an affected device when the Cisco Unified Border Element feature is enabled. This can be achieved via crafted SIP messages.

Recommendations For devices running Cisco IOS versions 12.2 through 12.4 with the Cisco Unified Border Element feature enabled, update to a version that includes the software updates released by Cisco to address this vulnerability. If updating is not feasible, consider mitigations available to limit exposure of the vulnerability, as outlined in the Cisco Security Advisory.

Correção

Identificadores relacionados

CVE-2009-2870

Produtos afetados

Cisco Ios

Referências · 6

• http://tools.cisco.com/security/center/viewAlert.x?alertId=18891 · Aviso do Fabricante
• http://securitytracker.com/id?1022930 · Nota
• http://vupen.com/english/advisories/2009/2759 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2009-2870 · Nota de Segurança
• http://cisco.com/en/US/products/products_security_advisory09186a0080af811b.shtml · Aviso do Fabricante
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20090923-sip · Aviso do Fabricante