PT-2008-5159 · Cisco · Ubr10012+3

Published 2008-09-26 · Updated 2022-06-02 · CVE-2008-3805

Positive Technologies (AI Summary)

CVSS v2.0

8.5

High

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:C

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.0 through 12.4 on Cisco 10000, uBR10012 and uBR7200 series devices

Description The issue allows remote attackers to cause a denial of service, resulting in a device or linecard reload, by sending crafted UDP packets to 127.0.0.0/8 addresses intended for IPC communication within the device.

Recommendations For Cisco IOS versions 12.0 through 12.4 on Cisco 10000, uBR10012 and uBR7200 series devices, consider restricting access to external UDP packets to minimize the risk of exploitation. As a temporary workaround, restrict the handling of external UDP packets sent to 127.0.0.0/8 addresses until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2008-3805

Affected Products

Cisco 10000

Cisco Ios

Ubr10012

Ubr7200

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2008-3805 · Security Note
• http://tools.cisco.com/security/center/viewAlert.x?alertId=16646 · Vendor Advisory
• http://cisco.com/en/US/products/products_security_advisory09186a0080a014ae.shtml · Vendor Advisory
• http://secunia.com/advisories/31990 · Note
• http://vupen.com/english/advisories/2008/2670 · Note
• http://securitytracker.com/id?1020935 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5910 · Note