|
|
|
Vulnerability Note VU#341288Cisco IOS fails to properly process certain packets containing a crafted IP optionOverviewCisco IOS software contains a vulnerablity that may allow an attacker to execute arbitrary code or create a denial of service condition.I. DescriptionCisco IOS is an operating system that is used on Cisco network devices. The Internet Control Message Protocol (ICMP) is a protocol commonly used for testing connections and diagnosing problems.A vulnerability exists in the way Cisco IOS processes the following types of packets sent to an IPv4 address on an affected system.
An attacker may be able to exploit the vulnerability by sending a packet with a specially crafted IP header to an IP address on a vulnerable system. Note that ICMP is often enabled on network infrastructure switches and routers for troubleshooting purposes. II. ImpactA remote unauthenticated attacker may be able to execute arbitrary code or create a denial of service condition. Note that a vulnerable system would have to be the destination for the specially crafted packet.III. SolutionUpgradeSee the Software Version and Fixes section of Cisco Security Advisory 20070124 for information on available upgrades.
References
Thanks to Cisco for information that was used in this report. This document was written by Ryan Giobbi.
If you have feedback, comments, or additional information about this vulnerability, please send us
email. |
|||||||||||||||||||||||||||||||||||||
|
||||||||||||||||||||||||||||||||||||||
Get Adobe Reader