PT-2001-2216 · Cisco · Cisco Ios

Published 2001-10-09 · Updated 2017-10-10 · CVE-2001-1071

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Cisco IOS versions prior to 12.2

Description The issue allows remote attackers to cause a denial of service due to memory consumption by flooding CDP neighbor announcements. This occurs when Cisco Discovery Protocol (CDP) is running.

Recommendations For versions prior to 12.2, consider disabling the CDP protocol as a temporary workaround to minimize the risk of exploitation. Restrict access to the network to prevent unauthorized CDP announcements.

Fix

Related Identifiers

CVE-2001-1071

Affected Products

Cisco Ios

References · 7

• http://securityfocus.com/bid/3412 · Vendor Advisory
• http://securityfocus.com/archive/1/219257 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2001-1071 · Security Note
• http://securityfocus.com/archive/1/219305 · Vendor Advisory
• http://osvdb.org/1969 · Note
• http://kb.cert.org/vuls/id/139491 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/7242 · Note