Cisco IOS contains a vulnerability in the processing of solicited Simple Network Management Protocol (SNMP) operations that may result in memory corruption of the device causing it to reload. Sustained exploitation of this vulnerability could lead to a denial of service condition affect a large segment of the Internet community.
The SNMP protocol enables network and system administrators to remotely monitor and configure devices on the network (devices such as switches and routers). There is a vulnerability in way Cisco IOS processes solicited SNMP operations. Sustained exploitation of this vulnerability could lead to a denial of service condition affecting large portions of the Internet community.
For more information, please refer to Cisco Security Advisory: "Vulnerabilities in SNMP Message Processing".
A remote, unauthenticated attacker could cause the vulnerable device to reload. Repeated exploitation of this vulnerability could lead to a sustained denial of service condition.
Thanks to Cisco for reporting this vulnerability.
This document was written by Jeff S Havrilla.
|Date First Published:||2004-04-20|
|Date Last Updated:||2004-04-21 01:45 UTC|