PT-2011-3824 · Cisco · Cisco Ios

Marc Heuse · Publicado 2011-06-07 · Atualizado 2017-08-29 · CVE-2011-2395

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Cisco IOS (affected versions not specified)

Description The issue concerns the Neighbor Discovery (ND) protocol implementation, which allows remote attackers to bypass the Router Advertisement Guarding functionality. This can be achieved via a fragmented IPv6 packet where the Router Advertisement (RA) message is contained in the second fragment. There are two demonstrated methods: (1) using a packet where the first fragment contains a long Destination Options extension header, or (2) using a packet where the first fragment contains an ICMPv6 Echo Request message.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-16

Identificadores relacionados

CVE-2011-2395

Produtos afetados

Cisco Ios

Referências · 4

• https://exchange.xforce.ibmcloud.com/vulnerabilities/67940 · Nota
• http://securityreason.com/securityalert/8271 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2011-2395 · Nota de Segurança
• http://seclists.org/fulldisclosure/2011/May/446 · Nota