search menu icon-carat-right cmu-wordmark

CERT Coordination Center

Cisco IPS MC Malformed Configuration Download Vulnerability

Vulnerability Note VU#154883

Original Release Date: 2005-11-02 | Last Revised: 2005-11-02

Overview

Cisco Management Center for IPS Sensors (IPS MC) contains a vulnerability that may cause some IPS signatures to become unintentionally disabled.

Description

Cisco IOS IPS

Cisco IOS IPS (Intrusion Prevention System) is a feature for Cisco IOS devices that provides in-line intrusion prevention services. Cisco IOS IPS performs packet inspection and can stop malicious traffic based on signatures.

CiscoWorks VPN/Security Management Solution

CiscoWorks VPN/Security Management Solution (VMS) is a collection of network management tools that provides the ability to configure and manage firewalls, IPS devices, VPN routers, and other devices.

Cisco Management Center for IPS Sensors

Cisco Management Center for IPS Sensors (IPS MC) is a component of CiscoWorks VMS. Cisco IPS MC is a web-based application that can be used to manage configurations for Cisco IPS devices. Cisco IPS MC can be used to deploy signatures to such devices.

The Problem

If a Cisco IOS IPS device has been configured by Cisco IPS MC, the configuration file may not contain a default port field for some signatures. Such signatures will be disabled on the Cisco IOS IPS device.

Impact

The Cisco IOS IPS device may not detect or prevent certain types of network attacks.

Solution

Apply a patch or upgrade
Please refer to the "Software Versions and Fixes" section of the Cisco Security Advisory for more information on upgrading.

Vendor Information

154883
 
Affected   Unknown   Unaffected

Cisco Systems, Inc.

Notified:  November 02, 2005 Updated:  November 02, 2005

Status

  Vulnerable

Vendor Statement

Please see http://www.cisco.com/warp/public/707/cisco-sa-20051101-ipsmc.shtml

Vendor Information

The vendor has not provided us with any further information regarding this vulnerability.

Addendum

Published 11/01/2005 at http://www.cisco.com/warp/public/707/cisco-sa-20051101-ipsmc.pdf

cisco-sa-20051101-ipsmc.pdf

If you have feedback, comments, or additional information about this vulnerability, please send us email.


CVSS Metrics

Group Score Vector
Base N/A N/A
Temporal N/A N/A
Environmental N/A

References

Acknowledgements

Thanks to Cisco Systems Product Security Incident Response Team for reporting this vulnerability.

This document was written by Will Dormann.

Other Information

CVE IDs: None
Severity Metric: 3.90
Date Public: 2005-11-01
Date First Published: 2005-11-02
Date Last Updated: 2005-11-02 19:36 UTC
Document Revision: 7

Sponsored by the Department of Homeland Security Office of Cybersecurity and Communications.