|
|
|
 |
Vulnerability Note VU#959203Cisco IOS OSPF neighbor IO buffer overflowOverviewCisco Internetwork Operating System (IOS) is the operating system for the majority of Cisco routers. Open Shortest-Path First (OSPF) is a interior routing protocol. A flaw in some Cisco IOS versions can allow a buffer overflow when handling a large number of OSPF neighbor connection requests.I. DescriptionIn OSPF (defined by RFC 1247), adjacent routers connect as "neighbors" to exchange routing information. Older versions of Cisco IOS, specifically v11.1 through 12.0, do not securely handle a large number of neighbors (more than 255). If an attacker configures more than 255 hosts (or spoofs that many) to try to become OSPF neighbors of a router running a vulnerable version of Cisco IOS, a table overflows. An attacker must be able to send OSPF packets to the router.II. ImpactAn attacker can cause a denial of service. It may be possible to execute arbitrary shell code.III. SolutionUpgradeUpgrade to a version of IOS after v12.0.
References
This issue was first reported by FX of Phenoelit Group. This document was written by Hal Burch.
If you have feedback, comments, or additional information about this vulnerability, please send us
email. |
|||||||||||||||||||||||||||||||||||||
|
|||||||||||||||||||||||||||||||||||||||
Get Adobe Reader