PT-2008-2747 · Cisco · Cisco Ios

Ryan Giobbi · Published 2008-03-26 · Updated 2017-09-29 · CVE-2008-1153

Positive Technologies (AI Summary)

CVSS v2.0

7.1

High

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.1 through 12.4

Description The issue allows remote attackers to cause a denial of service via a crafted IPv6 packet to the device, potentially causing the device to crash or blocking an interface. This can occur when IPv4 UDP services and the IPv6 protocol are enabled. Successful exploitation will prevent the interface from receiving any additional traffic, except for the Resource Reservation Protocol (RSVP) service, which will cause the device to crash if exploited.

Recommendations For Cisco IOS versions 12.1 through 12.4, update to a fixed software version to address this issue. As a temporary workaround, consider disabling IPv6 protocol or restricting IPv4 UDP services to minimize the risk of exploitation. Additionally, restricting access to the vulnerable interface can help mitigate the effects of the vulnerability.

Exploit

Fix

Related Identifiers

CVE-2008-1153

Affected Products

Cisco Ios

References · 11

• 🔥 http://cisco.com/warp/public/707/cisco-sa-20080326-IPv4IPv6.shtml · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-1153 · Security Note
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20080326-IPv4IPv6 · Vendor Advisory
• http://vupen.com/english/advisories/2008/1006/references · Note
• http://securitytracker.com/id?1019713 · Note
• http://us-cert.gov/cas/techalerts/TA08-087B.html · Note
• http://securityfocus.com/bid/28461 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5860 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41475 · Note
• http://kb.cert.org/vuls/id/936177 · Note
• http://secunia.com/advisories/29507 · Note