Cisco CatOS TCP-ACK Denial Of Service Vulnerability
BID:10504
Info
Cisco CatOS TCP-ACK Denial Of Service Vulnerability
| Bugtraq ID: | 10504 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 09 2004 12:00AM |
| Updated: | Jun 09 2004 12:00AM |
| Credit: | The vendor disclosed this vulnerability. |
| Vulnerable: |
Cisco CatOS 8.3 GLX Cisco CatOS 8.3 (1)GLX Cisco CatOS 8.2 (1) Cisco CatOS 8.2 Cisco CatOS 8.1 (3) Cisco CatOS 8.1 (2) Cisco CatOS 8.1 Cisco CatOS 7.6 (5) Cisco CatOS 7.6 (4) Cisco CatOS 7.6 (3) Cisco CatOS 7.6 (2) Cisco CatOS 7.6 (1) Cisco CatOS 7.6 Cisco CatOS 7.5 (1) Cisco CatOS 7.5 Cisco CatOS 7.4 (3) Cisco CatOS 7.4 (2) Cisco CatOS 7.4 (1) Cisco CatOS 7.4 (0.63) Cisco CatOS 7.4 (0.2)CLR Cisco CatOS 7.4 Cisco CatOS 7.3 (2) Cisco CatOS 7.3 (1) Cisco CatOS 7.3 Cisco CatOS 7.2 (2) Cisco CatOS 7.2 (1) Cisco CatOS 7.2 (0.65) Cisco CatOS 7.1 (2a) Cisco CatOS 7.1 (2) Cisco CatOS 7.1 (1a) Cisco CatOS 7.1 (1) Cisco CatOS 6.4 (8) Cisco CatOS 6.4 (7) Cisco CatOS 6.4 (6) Cisco CatOS 6.4 (5) Cisco CatOS 6.4 (4a) Cisco CatOS 6.4 (3) Cisco CatOS 6.4 (2) Cisco CatOS 6.4 (1) Cisco CatOS 6.3 (9) Cisco CatOS 6.3 (8.3) Cisco CatOS 6.3 (8) Cisco CatOS 6.3 (7) Cisco CatOS 6.3 (6) Cisco CatOS 6.3 (5.10) Cisco CatOS 6.3 (5) Cisco CatOS 6.3 (4a) Cisco CatOS 6.3 (4) Cisco CatOS 6.3 (3a) Cisco CatOS 6.3 (3)x1 Cisco CatOS 6.3 (3)x Cisco CatOS 6.3 (3) Cisco CatOS 6.3 (2a) Cisco CatOS 6.3 (2) Cisco CatOS 6.3 (1a) Cisco CatOS 6.3 (10) Cisco CatOS 6.3 (1) Cisco CatOS 6.2 (3a) Cisco CatOS 6.2 (3) Cisco CatOS 6.2 (2a) Cisco CatOS 6.2 (2) Cisco CatOS 6.2 (1a) Cisco CatOS 6.2 (1) Cisco CatOS 6.1 (4b) Cisco CatOS 6.1 (4) Cisco CatOS 6.1 (3a) Cisco CatOS 6.1 (3) Cisco CatOS 6.1 (2a) Cisco CatOS 6.1 (2) Cisco CatOS 6.1 (1e) Cisco CatOS 6.1 (1d) Cisco CatOS 6.1 (1c) Cisco CatOS 6.1 (1b) Cisco CatOS 6.1 (1a) Cisco CatOS 6.1 (1) Cisco CatOS 6.1 Cisco CatOS 5.5 (9) Cisco CatOS 5.5 (8a)CV Cisco CatOS 5.5 (8a) Cisco CatOS 5.5 (8) Cisco CatOS 5.5 (7a) Cisco CatOS 5.5 (7) Cisco CatOS 5.5 (6a) Cisco CatOS 5.5 (6) Cisco CatOS 5.5 (5) Cisco CatOS 5.5 (4b) Cisco CatOS 5.5 (4a) Cisco CatOS 5.5 (4) Cisco CatOS 5.5 (3) Cisco CatOS 5.5 (2) Cisco CatOS 5.5 (1a) Cisco CatOS 5.5 (19) Cisco CatOS 5.5 (18) Cisco CatOS 5.5 (17) Cisco CatOS 5.5 (16.2) Cisco CatOS 5.5 (16) Cisco CatOS 5.5 (15) Cisco CatOS 5.5 (14) Cisco CatOS 5.5 (13a) Cisco CatOS 5.5 (13.5) Cisco CatOS 5.5 (13) Cisco CatOS 5.5 (12a) Cisco CatOS 5.5 (12) Cisco CatOS 5.5 (11a) Cisco CatOS 5.5 (11) Cisco CatOS 5.5 (10a) Cisco CatOS 5.5 (10) Cisco CatOS 5.5 (1) Cisco CatOS 5.5 Cisco CatOS 5.4 (4a) Cisco CatOS 5.4 (4) Cisco CatOS 5.4 (3) Cisco CatOS 5.4 (2a) Cisco CatOS 5.4 (2) Cisco CatOS 5.4 (1) - deferred Cisco CatOS 5.4 (1) Cisco CatOS 5.4 Cisco CatOS 5.3 (6a)CSX Cisco CatOS 5.3 (6)CSX Cisco CatOS 5.3 (5a)CSX Cisco CatOS 5.3 (5)CSX Cisco CatOS 5.3 (4)CSX Cisco CatOS 5.3 (3)CSX Cisco CatOS 5.3 (2)CSX Cisco CatOS 5.3 (1a)CSX Cisco CatOS 5.2 (7a) Cisco CatOS 5.2 (7) Cisco CatOS 5.2 (6) Cisco CatOS 5.2 (5) Cisco CatOS 5.2 (4) Cisco CatOS 5.2 (3a)CSX Cisco CatOS 5.2 (3)CSX Cisco CatOS 5.2 (3) Cisco CatOS 5.2 (2)CSX Cisco CatOS 5.2 (2) Cisco CatOS 5.2 (1)CSX Cisco CatOS 5.2 (1) Cisco CatOS 5.1 (2b) Cisco CatOS 5.1 (2a) Cisco CatOS 5.1 (1a)CSX Cisco CatOS 5.1 (1a) Cisco CatOS 5.1 (1)CSX Cisco CatOS 5.1 (1) Cisco CatOS 4.5 (9) Cisco CatOS 4.5 (8) Cisco CatOS 4.5 (7) Cisco CatOS 4.5 (6a) Cisco CatOS 4.5 (6) Cisco CatOS 4.5 (5) Cisco CatOS 4.5 (4) Cisco CatOS 4.5 (3) Cisco CatOS 4.5 (2) Cisco CatOS 4.5 (14) Cisco CatOS 4.5 (13a) Cisco CatOS 4.5 (13) Cisco CatOS 4.5 (12a) Cisco CatOS 4.5 (12) Cisco CatOS 4.5 (11) Cisco CatOS 4.5 (10) Cisco CatOS 4.5 (1) Cisco CatOS 4.4 (1) Cisco CatOS 4.3 (1a) Cisco CatOS 4.2 (2) Cisco CatOS 4.2 (1) Cisco CatOS 4.1 (3) Cisco CatOS 4.1 (2) Cisco CatOS 4.1 (1) Cisco CatOS 3.2 (8) - GDR Cisco CatOS 3.2 (7) Cisco CatOS 3.2 (6) Cisco CatOS 3.2 (5) Cisco CatOS 3.2 (4) Cisco CatOS 3.2 (3) Cisco CatOS 3.2 (2) Cisco CatOS 3.2 (1b) Cisco CatOS 3.2 (1) Cisco CatOS 3.1 (2a) Cisco CatOS 3.1 (2) Cisco CatOS 3.1 (1) Cisco CatOS 2.4 (5a) Cisco CatOS 2.4 (5) Cisco CatOS 2.4 (4) Cisco CatOS 2.4 (3) Cisco CatOS 2.4 (2) Cisco CatOS 2.4 (1) Cisco CatOS 2.3 (1) Cisco CatOS 2.2 (2) Cisco CatOS 2.2 (1) Cisco CatOS 2.1 (9) Cisco CatOS 2.1 (8) Cisco CatOS 2.1 (7) Cisco CatOS 2.1 (6) Cisco CatOS 2.1 (5) Cisco CatOS 2.1 (4) Cisco CatOS 2.1 (3) Cisco CatOS 2.1 (2) Cisco CatOS 2.1 (12) Cisco CatOS 2.1 (11) Cisco CatOS 2.1 (10) Cisco CatOS 2.1 (1) Cisco CatOS 3.0(7) Cisco Catalyst 6000 7.6 (1) Cisco Catalyst 6000 7.5 (1) Cisco Catalyst 6000 7.1 (2) Cisco Catalyst 6000 7.1 Cisco Catalyst 6000 6.3 (4) Cisco Catalyst 6000 6.3 (0.7)PAN Cisco Catalyst 6000 6.2 (0.111) Cisco Catalyst 6000 6.2 (0.110) Cisco Catalyst 6000 6.1 (2.13) Cisco Catalyst 6000 6.1 (1c) Cisco Catalyst 6000 6.1 (1b) Cisco Catalyst 6000 6.1 (1a) Cisco Catalyst 6000 6.1 (1) Cisco Catalyst 6000 5.5 (4b) Cisco Catalyst 6000 5.5 (4a) Cisco Catalyst 6000 5.5 (4) Cisco Catalyst 6000 5.5 (3) Cisco Catalyst 6000 5.5 (2) Cisco Catalyst 6000 5.5 (13) Cisco Catalyst 6000 5.5 (1) Cisco Catalyst 6000 5.5 Cisco Catalyst 6000 5.4.1 Cisco Catalyst 6000 5.4 (4) Cisco Catalyst 6000 5.4 (3) Cisco Catalyst 6000 5.4 (2) Cisco Catalyst 6000 5.4 (1) Cisco Catalyst 6000 5.4 Cisco Catalyst 6000 5.3 (6)CSX Cisco Catalyst 6000 5.3 (5a)CSX Cisco Catalyst 6000 5.3 (5)CSX Cisco Catalyst 6000 5.3 (4)CSX Cisco Catalyst 6000 5.3 (3)CSX Cisco Catalyst 6000 5.3 (2)CSX Cisco Catalyst 6000 5.3 (1a)CSX Cisco Catalyst 6000 5.3 (1)CSX Cisco Catalyst 6000 3.1 (1a)WS-X6380-NAM Cisco Catalyst 6000 3.1 (1a)WS-SVC-NAM-2 Cisco Catalyst 6000 3.1 (1a)WS-SVC-NAM-1 Cisco Catalyst 6000 2.2 (1a)WS-SVC-NAM-2 Cisco Catalyst 6000 2.2 (1a)WS-SVC-NAM-1 Cisco Catalyst 6000 2.1 (2)WS-X6380-NAM Cisco Catalyst 5000 6.3 (4) Cisco Catalyst 5000 6.1 (3) Cisco Catalyst 5000 6.1 (2) Cisco Catalyst 5000 6.1 (1c) Cisco Catalyst 5000 6.1 (1b) Cisco Catalyst 5000 6.1 (1a) Cisco Catalyst 5000 6.1 (1) Cisco Catalyst 5000 5.5 (7) Cisco Catalyst 5000 5.5 (6) Cisco Catalyst 5000 5.5 (4b) Cisco Catalyst 5000 5.5 (4) Cisco Catalyst 5000 5.5 (3) Cisco Catalyst 5000 5.5 (2) Cisco Catalyst 5000 5.5 (13) Cisco Catalyst 5000 5.5 (1) Cisco Catalyst 5000 5.4.1 Cisco Catalyst 5000 5.4 (4) Cisco Catalyst 5000 5.4 (3) Cisco Catalyst 5000 5.4 (2) Cisco Catalyst 5000 5.4 (1) Cisco Catalyst 5000 5.2 (4) Cisco Catalyst 5000 5.2 (3) Cisco Catalyst 5000 5.2 (2) Cisco Catalyst 5000 5.2 (1) Cisco Catalyst 5000 5.2 Cisco Catalyst 5000 5.1 (2a) Cisco Catalyst 5000 5.1 (1) Cisco Catalyst 5000 5.1 Cisco Catalyst 5000 4.5 (9) Cisco Catalyst 5000 4.5 (8) Cisco Catalyst 5000 4.5 (7) Cisco Catalyst 5000 4.5 (6) Cisco Catalyst 5000 4.5 (5) Cisco Catalyst 5000 4.5 (4b) Cisco Catalyst 5000 4.5 (4) Cisco Catalyst 5000 4.5 (3) Cisco Catalyst 5000 4.5 (2) Cisco Catalyst 5000 4.5 (13a) Cisco Catalyst 5000 4.5 (12) Cisco Catalyst 5000 4.5 (11) Cisco Catalyst 5000 4.5 (10) Cisco Catalyst 5000 Cisco Catalyst 4912G Cisco Catalyst 4510R Cisco Catalyst 4507R Cisco Catalyst 4506 Cisco Catalyst 4503 Cisco Catalyst 4500 Cisco Catalyst 4000 7.6 (1) Cisco Catalyst 4000 7.5 (1) Cisco Catalyst 4000 7.1.2 Cisco Catalyst 4000 7.1 (2) Cisco Catalyst 4000 7.1 Cisco Catalyst 4000 6.3.5 Cisco Catalyst 4000 6.3 (4) Cisco Catalyst 4000 6.1 (1c) Cisco Catalyst 4000 6.1 (1b) Cisco Catalyst 4000 6.1 (1a) Cisco Catalyst 4000 6.1 (1) Cisco Catalyst 4000 5.5.5 Cisco Catalyst 4000 5.5 (4b) Cisco Catalyst 4000 5.5 (4) Cisco Catalyst 4000 5.5 (3) Cisco Catalyst 4000 5.5 (2) Cisco Catalyst 4000 5.5 (13) Cisco Catalyst 4000 5.5 (1) Cisco Catalyst 4000 5.5 Cisco Catalyst 4000 5.4.1 Cisco Catalyst 4000 5.4 (3) Cisco Catalyst 4000 5.4 (2) Cisco Catalyst 4000 5.4 (1) Cisco Catalyst 4000 5.4 Cisco Catalyst 4000 5.2 (7) Cisco Catalyst 4000 5.2 (6) Cisco Catalyst 4000 5.2 (5) Cisco Catalyst 4000 5.2 (4) Cisco Catalyst 4000 5.2 (2) Cisco Catalyst 4000 5.2 (1a) Cisco Catalyst 4000 5.2 (1) Cisco Catalyst 4000 5.2 Cisco Catalyst 4000 5.1 (2a) Cisco Catalyst 4000 5.1 (1a) Cisco Catalyst 4000 5.1 (1) Cisco Catalyst 4000 5.1 Cisco Catalyst 4000 4.5 (9) Cisco Catalyst 4000 4.5 (8) Cisco Catalyst 4000 4.5 (7) Cisco Catalyst 4000 4.5 (6) Cisco Catalyst 4000 4.5 (5) Cisco Catalyst 4000 4.5 (4b) Cisco Catalyst 4000 4.5 (4) Cisco Catalyst 4000 4.5 (3) Cisco Catalyst 4000 4.5 (2) Cisco Catalyst 4000 4.5 (10) Cisco Catalyst 4000 Cisco Catalyst 2948G-l3 Cisco Catalyst 2948G-GE-TX Cisco Catalyst 2948G Cisco Catalyst 2948 Cisco Catalyst 2926T Cisco Catalyst 2926GS Cisco Catalyst 2926GL Cisco Catalyst 2926F Cisco Catalyst 2926 Cisco Catalyst 2902 Cisco Catalyst 2901 Cisco Catalyst 2980G-A Cisco Catalyst 2980G |
| Not Vulnerable: |
Cisco CatOS 8.3 (2)GLX Cisco CatOS 8.2 (2) Cisco CatOS 7.6 (6) Cisco CatOS 6.4 (9) Cisco CatOS 5.5 (20) Cisco Catalyst 8540MSR Cisco Catalyst 8540CSR Cisco Catalyst 8510MSR Cisco Catalyst 8510CSR Cisco Catalyst 8500 Cisco Catalyst 4908G-l3 Cisco Catalyst 4840G Cisco Catalyst 4800 Cisco Catalyst 4232-13 Cisco Catalyst 4232 Cisco Catalyst 4224 Access Gateway Switch Cisco Catalyst 4200 Cisco Catalyst 3750 Metro Cisco Catalyst 3750 Cisco Catalyst 3560 Cisco Catalyst 3550 Cisco Catalyst 3500 XL Cisco Catalyst 2970 Cisco Catalyst 2955 Cisco Catalyst 2950 LRE Cisco Catalyst 2950 Cisco Catalyst 2948G-l3 Cisco Catalyst 2940 Cisco Catalyst 2900 XL Cisco Catalyst 2900 LRE XL Cisco Catalyst 2820 9.0 0.07 Cisco Catalyst 2820 Cisco Catalyst 1900 9.0 0.07 Cisco Catalyst 1900 |
Discussion
Cisco CatOS TCP-ACK Denial Of Service Vulnerability
It has been reported that Cisco CatOS is vulnerable to a denial of service attack. Improper initial TCP handshakes can cause affected devices to cease functioning and reboot.
These improper connections can originate from spoofed source addresses, making it easier for an attacker to accomplish a denial of service attack.
This vulnerability is only accessible if the device is running telnet, HTTP, or SSH services. IOS is not affected by this vulnerability.
It has been reported that Cisco CatOS is vulnerable to a denial of service attack. Improper initial TCP handshakes can cause affected devices to cease functioning and reboot.
These improper connections can originate from spoofed source addresses, making it easier for an attacker to accomplish a denial of service attack.
This vulnerability is only accessible if the device is running telnet, HTTP, or SSH services. IOS is not affected by this vulnerability.
Exploit / POC
Cisco CatOS TCP-ACK Denial Of Service Vulnerability
No exploit is required for this vulnerability.
No exploit is required for this vulnerability.
Solution / Fix
Cisco CatOS TCP-ACK Denial Of Service Vulnerability
Solution:
Cisco has released an advisory addressing this issue. Please see the referenced advisory for more information on fixes and workarounds.
Solution:
Cisco has released an advisory addressing this issue. Please see the referenced advisory for more information on fixes and workarounds.
References
Cisco CatOS TCP-ACK Denial Of Service Vulnerability
References:
References:
- Cisco Call Manager Express (Cisco Systems)
- Cisco Security Advisory: Cisco CatOS Telnet, HTTP and SSH Vulnerability (Cisco)