Cisco IOS 2921/K9 Router Lets Remote Users Deny Service
|
|
SecurityTracker Alert ID: 1025484 |
|
SecurityTracker URL: http://securitytracker.com/id/1025484
|
|
CVE Reference:
GENERIC-MAP-NOMATCH
(Links to External Site)
|
Updated: May 5 2011
|
Original Entry Date: May 4 2011
|
Impact:
Denial of service via network
|
|
Version(s): 2921/K9 Router; 15.0 M6
|
Description:
Two vulnerabilities were reported in Cisco IOS. A remote user can cause denial of service conditions.
A remote user can send specially crafted data to UDP ports 161 and 162 to cause the target service to consume excessive CPU resources when SNMP is disabled.
A remote user can send a large number of UDP packets to cause the target device to consume all available CPU resources and become unresponsive.
The Cisco 2921/K9 router is affected.
The penetration test team Of NCNIPC (China) reported this vulnerability.
|
Impact:
A remote user can consume excessive CPU resources on the target system.
|
Solution:
No solution was available at the time of this entry.
The vendor is analyzing the report and has not yet confirmed this vulnerability.
The vendor's advisory is available at:
http://www.cisco.com/warp/public/707/cisco-sr-20110505-ios.shtml
|
Vendor URL: www.cisco.com/warp/public/707/cisco-sr-20110505-ios.shtml (Links to External Site)
|
Cause:
Resource error
|
Underlying OS:
|
|
Message History:
None.
|
Source Message Contents
|
Date: Wed, 04 May 2011 03:11:41 -0600
Subject: Cisco IOS SNMP Message Processing Denial Of Service Vulnerability
|
Cisco IOS SNMP Message Processing Denial Of Service Vulnerability
------------------------------------------------------------------
I. Summary
Cisco Internetwork Operating System (IOS) 15.0 attempts to process SNMP solicited operations on improper ports (UDP 161,162), which allows remote attackers to cause a denial of service when SNMP is disabled.
------------------------------------------------------------------
II. Description
It has been reported that the Cisco Internet Operating System (IOS) is affected by a remote SNMP message processing denial of service vulnerability. This issue may be leveraged to cause a denial of service condition in the affected device. The denial of service is due to the process consumed all available CPU resources in the affected device.The device may have to be reset manually if the attack is successful.
------------------------------------------------------------------
III. Impact
Denial of service (process consume all available CPU resources)
------------------------------------------------------------------
IV. Affected
Cisco router 2921/K9 IOS 15.0<1r>M6, tested with kubuntu 10.10. Previous versions may also be affected due to code reuse.
------------------------------------------------------------------
V. Solution
Currently there are not any vendor-supplied patches for this issue.
------------------------------------------------------------------
VI. Credit
The penetration test team Of NCNIPC (China) is credited for this vulnerability.
|
|
