PT-2004-2347 · Cisco · Cisco Ons 15454+2

Published 2004-12-31 · Updated 2018-10-30 · CVE-2004-1432

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions: Cisco ONS 15327 versions prior to 4.6(2) Cisco ONS 15454 versions prior to 4.6(2) Cisco ONS 15454 SDH versions prior to 4.6(2)

Description: The issue allows remote attackers to cause a denial of service, resulting in a control card reset, by sending malformed IP or ICMP packets.

Recommendations: For Cisco ONS 15327 versions prior to 4.6(2), update to version 4.6(2) or later to resolve the issue. For Cisco ONS 15454 versions prior to 4.6(2), update to version 4.6(2) or later to resolve the issue. For Cisco ONS 15454 SDH versions prior to 4.6(2), update to version 4.6(2) or later to resolve the issue.

Fix

Related Identifiers

CVE-2004-1432

Affected Products

Cisco Ons 15327

Cisco Ons 15454

Cisco Ons 15454 Sdh

References · 8

• http://cisco.com/warp/public/707/cisco-sa-20040721-ons.shtml · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2004-1432 · Security Note
• http://secunia.com/advisories/12117 · Note
• http://kb.cert.org/vuls/id/969344 · Note
• http://securityfocus.com/bid/10768 · Note
• http://kb.cert.org/vuls/id/918920 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16761 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16760 · Note