PT-2007-2359 · Cisco · Cisco Ios

Published 2007-02-14 · Updated 2022-06-02 · CVE-2007-0918

Positive Technologies (AI Summary)

CVSS v2.0

7.1

High

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions: Cisco IOS versions 12.3T, 12.3YA, 12.4XA

Description: The issue allows remote attackers to cause a denial of service, resulting in the crash of the Intrusion Prevention System (IPS) and potential traffic loss. This is achieved through unspecified manipulations that are not properly handled by the regular expression feature in the ATOMIC.TCP signature engine.

Recommendations: For Cisco IOS versions 12.3T, 12.3YA, 12.4XA, consider disabling the ATOMIC.TCP signature engine in the IPS feature as a temporary workaround to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2007-0918

Affected Products

Cisco Ios

References · 10

• http://cisco.com/en/US/products/products_security_advisory09186a00807e0a5b.shtml · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-0918 · Security Note
• http://cisco.com/en/US/products/products_security_response09186a00807e0a5e.html · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/32474 · Note
• http://secunia.com/advisories/24142 · Note
• http://vupen.com/english/advisories/2007/0597 · Note
• http://securityfocus.com/bid/22549 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5832 · Note
• http://securitytracker.com/id?1017631 · Note
• http://osvdb.org/33053 · Note