PT-2009-3275 · Cisco · Cisco Ios

Published 2009-03-25 · Updated 2017-09-29 · CVE-2009-0634

Positive Technologies (AI Summary)

CVSS v2.0

7.1

High

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.3 through 12.4

Description The issue affects the home agent implementation in the Mobile IP NAT Traversal feature and the Mobile IPv6 subsystem, allowing remote attackers to cause a denial of service via an ICMP packet. Devices running Cisco IOS Software and configured for Mobile IP Network Address Translation (NAT) Traversal feature or Mobile IPv6 are vulnerable to a denial of service attack that may result in a blocked interface.

Recommendations For Cisco IOS versions 12.3 through 12.4, update to a version that includes the software updates released by Cisco to address these vulnerabilities. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2009-0634

Affected Products

Cisco Ios

References · 11

• http://vupen.com/english/advisories/2009/0851 · Vendor Advisory
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20090325-mobileip · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-0634 · Security Note
• http://secunia.com/advisories/34438 · Vendor Advisory
• http://cisco.com/en/US/products/products_security_advisory09186a0080a90469.shtml · Vendor Advisory
• http://cisco.com/en/US/products/products_security_advisory09186a0080a9042f.shtml · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/49585 · Note
• http://securitytracker.com/id?1021898 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/49424 · Note
• http://securityfocus.com/bid/34241 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12043 · Note