PT-2008-5160 · Cisco · Ubr10012+3

Published 2008-09-26 · Updated 2022-06-02 · CVE-2008-3806

Positive Technologies (AI Summary)

CVSS v2.0

8.5

High

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:C

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.0 through 12.4 on Cisco 10000, uBR10012 and uBR7200 series devices

Description The issue allows remote attackers to cause a denial of service, resulting in a device or linecard reload, by sending crafted UDP packets to 127.0.0.0/8 addresses intended for IPC communication within the device.

Recommendations For Cisco IOS versions 12.0 through 12.4 on Cisco 10000, uBR10012 and uBR7200 series devices, consider restricting access to external UDP packets sent to 127.0.0.0/8 addresses as a temporary workaround until a patch is available.

Fix

Related Identifiers

CVE-2008-3806

Affected Products

Cisco 10000

Cisco Ios

Ubr10012

Ubr7200

References · 6

• http://tools.cisco.com/security/center/viewAlert.x?alertId=16646 · Vendor Advisory
• http://cisco.com/en/US/products/products_security_advisory09186a0080a014ae.shtml · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-3806 · Security Note
• http://secunia.com/advisories/31990 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7123 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/45592 · Note