Cisco 6000/6500/7600 series systems with Multilayer Switch Feature Card 2 (MSFC2) fail to properly process layer 2 frames.
Cisco 6000/6500/7600 series systems with MSFC2 contain a vulnerability in the way layer 2 frames are processed in software. By sending a specially crafted layer 2 frame that is inconsistent with the length of the encapsulated layer 3 packet, an attacker could cause the system to freeze or reset. This vulnerability only affects systems with specific hardware/software configurations.
According to the Cisco Advisory, the following systems are affected:
Note: Cisco 6000/6500/7600 series systems with a Supervisor 720 are not affected by this vulnerability.
The Cisco Advisory also mentions that affected systems may be running native or hybrid code. Hybrid is a term used to refer to a configuration where CatOS is running on the Supervisor Engine and Cisco IOS is running on the MSFC. Native code is a term used to refer to a configuration where a single IOS image runs on both the Supervisor and the MSFC.
Exploitation of this vulnerability could cause a vulnerable system to freeze or reset resulting in a denial-of-service condition. In order to restore functionality, the system would have to be reset.
This vulnerability was reported by the Cisco Systems Product Security Incident Response Team (PSIRT).
This document was written by Damon Morda.
|Date First Published:||2004-03-30|
|Date Last Updated:||2004-04-05 20:41 UTC|