|
|
|
Vulnerability Note VU#810062Cisco 6000/6500/7600 series systems fail to properly process layer 2 framesOverviewCisco 6000/6500/7600 series systems with Multilayer Switch Feature Card 2 (MSFC2) fail to properly process layer 2 frames.I. DescriptionCisco 6000/6500/7600 series systems with MSFC2 contain a vulnerability in the way layer 2 frames are processed in software. By sending a specially crafted layer 2 frame that is inconsistent with the length of the encapsulated layer 3 packet, an attacker could cause the system to freeze or reset. This vulnerability only affects systems with specific hardware/software configurations.According to the Cisco Advisory, the following systems are affected:
Note: Cisco 6000/6500/7600 series systems with a Supervisor 720 are not affected by this vulnerability. The Cisco Advisory also mentions that affected systems may be running native or hybrid code. Hybrid is a term used to refer to a configuration where CatOS is running on the Supervisor Engine and Cisco IOS is running on the MSFC. Native code is a term used to refer to a configuration where a single IOS image runs on both the Supervisor and the MSFC. II. ImpactExploitation of this vulnerability could cause a vulnerable system to freeze or reset resulting in a denial-of-service condition. In order to restore functionality, the system would have to be reset.III. SolutionUpgradeCisco has released an advisory "Cisco 6000/6500/7600 Crafted Layer 2 Frame Vulnerability" to address this issue. For information on upgrading, please refer to the "Software Versions and Fixes" section of the Cisco Advisory.
References
This vulnerability was reported by the Cisco Systems Product Security Incident Response Team (PSIRT). This document was written by Damon Morda.
If you have feedback, comments, or additional information about this vulnerability, please send us
email. |
||||||||||||||||||||||||||||||||||||||
|
|||||||||||||||||||||||||||||||||||||||
Get Adobe Reader