PT-2009-3274 · Cisco · Cisco Ios

Published 2009-03-25 · Updated 2017-09-29 · CVE-2009-0633

Positive Technologies (AI Summary)

CVSS v2.0

7.1

High

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.3 through 12.4

Description The issue affects the Mobile IP NAT Traversal feature and the Mobile IPv6 subsystem, allowing remote attackers to cause a denial of service via MIPv6 packets. This can result in an input queue wedge and interface outage. Devices running Cisco IOS Software and configured for Mobile IP Network Address Translation (NAT) Traversal feature or Mobile IPv6 are vulnerable to a denial of service attack that may result in a blocked interface.

Recommendations For Cisco IOS versions 12.3 through 12.4, update to a version that includes the software updates released by Cisco to address these vulnerabilities. As a temporary workaround, consider disabling the Mobile IP NAT Traversal feature and the Mobile IPv6 subsystem until a patch is available. Restrict access to the affected interfaces to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2009-0633

Affected Products

Cisco Ios

References · 10

• http://vupen.com/english/advisories/2009/0851 · Vendor Advisory
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20090325-mobileip · Vendor Advisory
• http://secunia.com/advisories/34438 · Vendor Advisory
• http://cisco.com/en/US/products/products_security_advisory09186a0080a90469.shtml · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-0633 · Security Note
• http://cisco.com/en/US/products/products_security_advisory09186a0080a9042f.shtml · Vendor Advisory
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12290 · Note
• http://securitytracker.com/id?1021898 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/49424 · Note
• http://securityfocus.com/bid/34241 · Note