PT-2007-5611 · Cisco · Cisco Ios

Dario Ciccarone · Published 2007-08-20 · Updated 2011-05-18 · CVE-2007-4430

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.0 through 12.4

Description The issue allows context-dependent attackers to cause a denial of service, resulting in a device restart and BGP routing table rebuild, by using certain regular expressions in a "show ip bgp regexp" command. Unauthenticated remote attacks are possible in environments with anonymous telnet and Looking Glass access.

Recommendations For Cisco IOS versions 12.0 through 12.4, consider restricting access to the "show ip bgp regexp" command to prevent unauthenticated remote attacks, and limit the use of anonymous telnet and Looking Glass access until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2007-4430

Affected Products

Cisco Ios

References · 11

• 🔥 https://exploit-db.com/exploits/30506 · Exploit
• http://secunia.com/advisories/26798 · Vendor Advisory
• http://vupen.com/english/advisories/2007/3136 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-4430 · Security Note
• http://cisco.com/en/US/products/products_security_response09186a00808bb91c.html · Vendor Advisory
• http://securitytracker.com/id?1018685 · Note
• http://heise-security.co.uk/news/94526 · Note
• https://puck.nether.net/pipermail/cisco-nsp/2007-August/043002.html · Note
• http://forum.cisco.com/eforum/servlet/NetProf?page=netprof&forum=Network%20Infrastructure&topic=WAN%2C%20Routing%20and%20Switching&CommCmd=MB%3Fcmd%3Ddisplay_location%26location%3D.1ddf7bc9 · Note
• http://securityfocus.com/bid/25352 · Note
• https://puck.nether.net/pipermail/cisco-nsp/2007-August/043010.html · Note