PT-2006-1412 · Cisco · Cisco Ios

Published 2006-01-21 · Updated 2017-07-20 · CVE-2006-0340

Positive Technologies (AI Summary)

CVSS v2.0

7.1

High

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.0 through 12.4

Description The issue affects Cisco IOS when SGBP is enabled, allowing remote attackers on the local network to cause a denial of service, resulting in device hang and network traffic loss, via a crafted UDP packet to port 9900, which is the "API Endpoint: port 9900".

Recommendations For Cisco IOS versions 12.0 through 12.4, consider disabling SGBP support as a temporary workaround until a patch is available. Restrict access to port 9900 to minimize the risk of exploitation.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2006-0340

Affected Products

Cisco Ios

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2006-0340 · Security Note
• http://cisco.com/warp/public/707/cisco-sa-20060118-sgbp.shtml · Vendor Advisory
• http://secunia.com/advisories/18490 · Vendor Advisory
• http://securitytracker.com/id?1015501 · Patch
• http://vupen.com/english/advisories/2006/0248 · Note
• http://securityreason.com/securityalert/358 · Note
• http://securityfocus.com/bid/16303 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24182 · Note
• http://osvdb.org/22624 · Note