PT-2006-5435 · Cisco · Cisco Ios

Fx · Published 2006-09-09 · Updated 2018-10-17 · CVE-2006-4650

Positive Technologies (AI Summary)

CVSS v2.0

2.6

Low

Base vector

AV:N/AC:H/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.0 through 12.2

Description The issue occurs when GRE IP tunneling is used without the RFC2784 compliance fixes, leading to a failure in verifying the offset field of a GRE packet during decapsulation. This results in an integer overflow that references data from incorrect memory locations, allowing remote attackers to inject crafted packets into the routing queue. This could potentially bypass intended router ACLs.

Recommendations For Cisco IOS versions 12.0 through 12.2, apply the RFC2784 compliance fixes to ensure proper verification of the offset field in GRE packets.

Fix

Related Identifiers

CVE-2006-4650

Affected Products

Cisco Ios

References · 12

• http://phenoelit.de/stuff/CiscoGRE.txt · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-4650 · Security Note
• http://cisco.com/en/US/tech/tk827/tk369/tsd_technology_security_response09186a008072cd7b.html · Vendor Advisory
• http://securitytracker.com/id?1016799 · Note
• http://securityfocus.com/archive/1/445322/100/0/threaded · Note
• http://securityreason.com/securityalert/1526 · Note
• http://securityfocus.com/bid/19878 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/28786 · Note
• http://vupen.com/english/advisories/2006/3502 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5713 · Note
• http://secunia.com/advisories/21783 · Note
• http://osvdb.org/28590 · Note