PT-2004-1685 · Cisco · Cisco Ios+1

Published 2004-06-16 · Updated 2022-08-24 · CVE-2004-0589

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 11.1(x) through 11.3(x) Cisco IOS versions 12.0(x) through 12.2(x)

Description The issue allows remote attackers to cause a denial of service, resulting in a device reload, via malformed BGP OPEN or UPDATE messages. A Cisco device running IOS and enabled for the Border Gateway Protocol is vulnerable to this attack. The BGP protocol is not enabled by default and must be configured to accept traffic from an explicitly defined peer. Unless the malicious traffic appears to be sourced from a configured, trusted peer, it would be difficult to inject a malformed packet.

Recommendations For Cisco IOS versions 11.1(x) through 11.3(x), update to a version that includes the fix made available by Cisco. For Cisco IOS versions 12.0(x) through 12.2(x), update to a version that includes the fix made available by Cisco. As a temporary workaround, consider restricting BGP traffic to only trusted peers to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2004-0589

Affected Products

Cisco Ios

Cisco Ios Xr

References · 6

• http://cisco.com/warp/public/707/cisco-sa-20040616-bgp.shtml · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2004-0589 · Security Note
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20040616-bgp · Vendor Advisory
• http://kb.cert.org/vuls/id/784540 · Patch
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4948 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16427 · Note