Vulnerability Note VU#104823

Cayman gateways vulnerable to a denial of service via oversized ICMP echo (ping) requests.

Overview

Cayman gateways vulnerable to a denial of service via oversized ICMP echo (ping) requests. Installing the newest version of the vendor software will resolve this vulnerability.

I. Description

Cayman gateways running versions 5.5 Build R0, 5.3 Build R2, 5.3 Build R1 are vulnerable to an oversized ICMP echo (ping) request. By sending an oversized ping packet to the gateway, it is possible to crash various services resulting in a denial of service.

II. Impact

Exploiting this vulnerability results in a denial of service.

III. Solution

Upgrade to the latest vendor software release.

Systems Affected

Vendor	Status	Date Notified	Date Updated
Cayman	Vulnerable	21-Aug-2001

References

http://www.securityfocus.com/bid/1240

Credit

This vulnerability was discovered by Cassius.

This document was written by Jason Rafail.

Other Information

Date Public:	2000-05-23
Date First Published:	2001-08-27
Date Last Updated:	2001-08-27
CERT Advisory:
CVE-ID(s):	CVE-2000-0418
NVD-ID(s):	CVE-2000-0418
US-CERT Technical Alerts:
Metric:	1.41
Document Revision:	11

If you have feedback, comments, or additional information about this vulnerability, please send us email.

Get Adobe Reader