PT-2005-1280 · Cisco · Cisco Ios

Published 2005-02-06 · Updated 2017-10-11 · CVE-2005-0197

Positive Technologies (AI Summary)

CVSS v2.0

6.1

Medium

Base vector

AV:A/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.1T, 12.2, 12.2T, 12.3, and 12.3T

Description The issue allows remote attackers to cause a denial of service, resulting in a device reload, by sending a crafted packet to a disabled interface with Multi Protocol Label Switching (MPLS) installed but not enabled.

Recommendations For Cisco IOS versions 12.1T, 12.2, 12.2T, 12.3, and 12.3T, consider disabling the MPLS feature entirely or restricting access to the disabled interface as a temporary workaround until a patch is available.

Fix

Weakness Enumeration

CWE-16

Related Identifiers

CVE-2005-0197

Affected Products

Cisco Ios

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2005-0197 · Security Note
• http://cisco.com/warp/public/707/cisco-sa-20050126-les.shtml · Vendor Advisory
• http://us-cert.gov/cas/techalerts/TA05-026A.html · Patch
• http://kb.cert.org/vuls/id/583638 · Patch
• http://secunia.com/advisories/14031 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5662 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19071 · Note
• http://securitytracker.com/id?1013015 · Note
• http://securityfocus.com/bid/12369 · Note