PT-2005-5121 · Cisco · Eigrp+1

Andrew A. Vladimirov + 1 · Published 2005-12-21 · Updated 2018-10-19 · CVE-2005-4436

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco IOS versions after 12.3(2), 12.3(3)B, and 12.3(2)T Extended Interior Gateway Routing Protocol (EIGRP) version 1.2

Description The issue allows remote attackers to cause a denial of service by sending a spoofed neighbor announcement with either mismatched k values or a goodbye message Type-Length-Value (TLV).

Recommendations For Cisco IOS versions after 12.3(2), 12.3(3)B, and 12.3(2)T, consider restricting access to the EIGRP protocol to minimize the risk of exploitation. For Extended Interior Gateway Routing Protocol (EIGRP) version 1.2, avoid using the protocol until the issue is resolved or apply configuration changes to prevent spoofed neighbor announcements. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2005-4436

Affected Products

Cisco Ios

Eigrp

References · 8

• http://lists.grok.org.uk/pipermail/full-disclosure/2005-December/040330.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-4436 · Security Note
• http://securityfocus.com/bid/15978 · Note
• http://securitytracker.com/id?1015382 · Note
• http://marc.info/?l=full-disclosure&m=113504451523186&w=2 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5454 · Note
• http://securityfocus.com/archive/1/419898/100/0/threaded · Note
• http://vupen.com/english/advisories/2005/3008 · Note