PT-2005-1279 · Cisco · Cisco Ios+1

Published 2005-01-26 · Updated 2017-10-11 · CVE-2005-0196

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.0 through 12.3YL

Description The issue allows remote attackers to cause a denial of service (device reload) via a malformed BGP packet. A Cisco device running IOS Border Gateway Protocol (BGP) is vulnerable to a Denial of Service (DoS) attack if it has either the command bgp log-neighbor-changes configured or the command snmp-server enable traps bgp. The BGP protocol is not enabled by default and must be configured to accept traffic from an explicitly defined peer. Unless the malicious traffic appears to be sourced from a configured, trusted peer, it would be difficult to inject a malformed packet.

Recommendations For Cisco IOS versions 12.0 through 12.3YL, update to a version that includes the free software made available by Cisco to address this problem. As a temporary workaround, consider disabling the bgp log-neighbor-changes command or restricting the use of the BGP protocol to minimize the risk of exploitation. Restrict access to the BGP protocol to only trusted peers to reduce the likelihood of a Denial of Service attack.

Fix

Related Identifiers

CVE-2005-0196

Affected Products

Cisco Ios

Cisco Ios Xr

References · 9

• http://cisco.com/warp/public/707/cisco-sa-20050126-bgp.shtml · Vendor Advisory
• http://kb.cert.org/vuls/id/689326 · Patch
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20050126-bgp · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-0196 · Security Note
• http://us-cert.gov/cas/techalerts/TA05-026A.html · Patch
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19074 · Note
• http://securitytracker.com/id?1013013 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5652 · Note
• http://secunia.com/advisories/14034 · Note