Vulnerability Note VU#969344

Multiple Cisco ONS control cards fail to properly handle malformed IP packets

Overview

A vulnerability exists in multiple control cards used by Cisco ONS devices. This vulnerability could allow a remote attacker to cause a denial-of-service condition.

I. Description

Cisco's Optical Networking product line consists of a series of devices designed to offer high-bandwidth data services. These optical devices are managed through a series of control cards, which vary depending on the model of the device. There is a vulnerability in the way the XTC, TCC/TCC+/TCC2, and TCCi/TCC2 control cards handle malformed IP packets. By sending specially crafted IP packets to a vulnerable optical device, a remote attacker could cause the control cards to reset.

Vulnerable

4.6(0) and 4.6(1)
4.1(0) to 4.1(3)
4.0(0) to 4.0(2)
3.x(x) and earlier

4.6(0) and 4.6(1)
4.5(x)
4.1(0) to 4.1(3)
4.0(0) to 4.0(2)
3.x(x)
earlier than 2.3(5)

4.6(0) and 4.6(1)
4.5(x)
4.1(0) to 4.1(3)
4.0(0) to 4.0(2)
3.x(x)
earlier than 2.3(5)

Not vulnreable

Cisco ONS 15600 Multiservice Switching Platform

II. Impact

A remote, unauthenticated attacker could cause control cards to reset on an affected optical device. Repeated exploitation of this vulnerability could result in a denial of service.

For more information on the impact of this vulnerability, please refer to the "Impact" section of the Cisco Advisory.

III. Solution

Upgrade

Please refer to the "Software Versions and Fixes" section of the Cisco Advisory for more information on upgrading.

Systems Affected

Vendor	Status	Date Notified	Date Updated
Cisco Systems Inc.	Vulnerable	27-Jul-2004

References

http://www.cisco.com/warp/public/707/cisco-sa-20040721-ons.shtml
http://www.cisco.com/en/US/products/hw/optical/
http://secunia.com/advisories/12117/
http://www.securitytracker.com/alerts/2004/Jul/1010749.html

Credit

This vulnerability was reported by the Cisco Systems Product Security Incident Response Team (PSIRT).

This document was written by Damon Morda based on information provided by Cisco.

Other Information

Date Public:	2004-07-21
Date First Published:	2004-07-27
Date Last Updated:	2004-08-05
CERT Advisory:
CVE-ID(s):
NVD-ID(s):
US-CERT Technical Alerts:
Metric:	8.03
Document Revision:	12

If you have feedback, comments, or additional information about this vulnerability, please send us email.

Get Adobe Reader