PT-2007-2679 · Cisco · Cisco Catalyst 6500+1

Published 2007-02-28 · Updated 2017-10-11 · CVE-2007-1258

Positive Technologies (AI Summary)

CVSS v2.0

6.1

Medium

Base vector

AV:A/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.2SXA, SXB, SXD, and SXF

Description The issue allows remote attackers on a local network segment to cause a denial of service (software reload) via a certain MPLS packet. This affects Cisco Catalyst 6500 series systems running certain versions of Cisco Internetwork Operating System (IOS) in Hybrid Mode or with Cisco IOS Software Modularity. MPLS packets can only be sent from the local network segment.

Recommendations For Cisco IOS versions 12.2SXA, SXB, SXD, and SXF, consider restricting access to the local network segment to minimize the risk of exploitation. As a temporary workaround, consider disabling the handling of MPLS packets on affected systems until a patch is available.

Fix

Related Identifiers

CVE-2007-1258

Affected Products

Cisco Catalyst 6500

Cisco Ios

References · 9

• http://secunia.com/advisories/24348 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-1258 · Security Note
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20070228-mpls · Vendor Advisory
• http://cisco.com/warp/public/707/cisco-sa-20070228-mpls.shtml · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/32748 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5869 · Note
• http://securitytracker.com/id?1017709 · Note
• http://vupen.com/english/advisories/2007/0782 · Note
• http://osvdb.org/33067 · Note