Cisco IOS RST-ACK Packet Access Control Bypass Vulnerability

Bugtraq ID:	10052
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Mar 29 2004 12:00AM
Updated:	Mar 29 2004 12:00AM
Credit:	This vulnerability was discovered by the Security.NNOV group.
Vulnerable:	Cisco IOS 11.2(11)
Not Vulnerable:

Cisco IOS RST-ACK Packet Access Control Bypass Vulnerability

Cisco IOS 11.2 has been reported prone to an access control bypass vulnerability. The issue is reported to present itself on C2500-F2IN-L appliances, but may also affect other Cisco devices that are running IOS 11.2.

It has been repotred that an attacker who resides on a blocked network segment may bypass the access controls by transmitting TCP packets to target hosts that have both RST and ACK flags set.

Cisco IOS RST-ACK Packet Access Control Bypass Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Cisco IOS RST-ACK Packet Access Control Bypass Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Cisco IOS RST-ACK Packet Access Control Bypass Vulnerability

References:

• Detour of blocking on CISCO rautere at scanning a network (Security.NNOV)