PT-2005-5122 · Cisco · Eigrp+1

Andrew A. Vladimirov · Published 2005-12-21 · Updated 2018-10-19 · CVE-2005-4437

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 11.3 and later

Description The issue concerns MD5 Neighbor Authentication in Extended Interior Gateway Routing Protocol (EIGRP) 1.2. It allows remote attackers to sniff message hashes and either replay EIGRP HELLO messages or cause a denial of service by sending a large number of spoofed EIGRP neighbor announcements. This can result in an ARP storm on the local network.

Recommendations For Cisco IOS versions 11.3 and later, consider disabling MD5 Neighbor Authentication in EIGRP as a temporary workaround until a patch is available. Restrict access to EIGRP neighbor announcements to minimize the risk of exploitation. Avoid using the affected EIGRP protocol until the issue is resolved.

Fix

Related Identifiers

CVE-2005-4437

Affected Products

Cisco Ios

Eigrp

References · 10

• http://lists.grok.org.uk/pipermail/full-disclosure/2005-December/040332.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-4437 · Security Note
• http://securitytracker.com/id?1015382 · Note
• http://marc.info/?l=full-disclosure&m=113504451523186&w=2 · Note
• http://securityfocus.com/archive/1/419830/100/0/threaded · Note
• http://securityreason.com/securityalert/274 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5741 · Note
• http://securityfocus.com/bid/15970 · Note
• http://securityfocus.com/archive/1/419898/100/0/threaded · Note
• http://vupen.com/english/advisories/2005/3008 · Note