search menu icon-carat-right cmu-wordmark

CERT Coordination Center


Cisco IOS fails to properly process solicited SNMP operations

Vulnerability Note VU#162451

Original Release Date: 2004-04-20 | Last Revised: 2004-04-21

Overview

Cisco IOS contains a vulnerability in the processing of solicited Simple Network Management Protocol (SNMP) operations that may result in memory corruption of the device causing it to reload. Sustained exploitation of this vulnerability could lead to a denial of service condition affect a large segment of the Internet community.

Description

The SNMP protocol enables network and system administrators to remotely monitor and configure devices on the network (devices such as switches and routers). There is a vulnerability in way Cisco IOS processes solicited SNMP operations. Sustained exploitation of this vulnerability could lead to a denial of service condition affecting large portions of the Internet community.

For more information, please refer to Cisco Security Advisory: "Vulnerabilities in SNMP Message Processing".

Impact

A remote, unauthenticated attacker could cause the vulnerable device to reload. Repeated exploitation of this vulnerability could lead to a sustained denial of service condition.

Solution

Upgrade

Cisco has published detailed information about upgrading affected Cisco IOS software to correct this vulnerability. System managers are encouraged to upgrade to one of the non-vulnerable releases. For additional information regarding availability of repaired releases, please refer to the "Software Versions and Fixes" section of the Cisco Security Advisory.

Workarounds


Cisco recommends a number of workarounds, including disabling SNMP processing on affected devices. For a complete list of workarounds, see the Cisco Security Advisory.

Vendor Information

162451
Expand all

Cisco Systems Inc.

Updated:  April 20, 2004

Status

  Vulnerable

Vendor Statement

No statement is currently available from the vendor regarding this vulnerability.

Vendor Information

The vendor has not provided us with any further information regarding this vulnerability.

Addendum

Please refer to Cisco Security Advisory "Vulnerabilities in SNMP Message Processing".

If you have feedback, comments, or additional information about this vulnerability, please send us email.


CVSS Metrics

Group Score Vector
Base N/A N/A
Temporal N/A N/A
Environmental N/A

References

Credit

Thanks to Cisco for reporting this vulnerability.

This document was written by Jeff S Havrilla.

Other Information

CVE IDs: None
Severity Metric: 90.97
Date Public: 2004-04-20
Date First Published: 2004-04-20
Date Last Updated: 2004-04-21 01:45 UTC
Document Revision: 19

Sponsored by the Department of Homeland Security Office of Cybersecurity and Communications.