PT-2005-3360 · Cisco · Cisco Ios Xr+1

Published 2005-07-29 · Updated 2017-10-11 · CVE-2005-2451

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.0 through 12.4 Cisco IOS XR versions prior to 3.2

Description The issue allows remote attackers on a local network segment to cause a denial of service (device reload) and possibly execute arbitrary code via a crafted IPv6 packet. Only devices that have been explicitly configured to process IPv6 traffic are affected. Upon successful exploitation, the device may reload or be open to further exploitation.

Recommendations For Cisco IOS versions 12.0 through 12.4, update to a version that addresses this vulnerability. For Cisco IOS XR versions prior to 3.2, update to version 3.2 or later. As a temporary workaround, consider disabling IPv6 traffic processing on affected devices until a patch is available.

Fix

Related Identifiers

CVE-2005-2451

Affected Products

Cisco Ios

Cisco Ios Xr

References · 12

• https://nvd.nist.gov/vuln/detail/CVE-2005-2451 · Security Note
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20050729-ipv6 · Vendor Advisory
• http://cisco.com/warp/public/707/cisco-sa-20050729-ipv6.shtml · Vendor Advisory
• http://secunia.com/advisories/16272 · Note
• http://kb.cert.org/vuls/id/930892 · Note
• http://securityfocus.com/bid/14414 · Note
• http://us-cert.gov/cas/techalerts/TA05-210A.html · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/21591 · Note
• http://osvdb.org/18332 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5445 · Note
• http://archives.neohapsis.com/archives/fulldisclosure/2005-07/0663.html · Note
• http://securitytracker.com/id?1014598 · Note