Cisco ONS Multiple Vulnerabilities
BID:10768
Info
Cisco ONS Multiple Vulnerabilities
| Bugtraq ID: | 10768 |
| Class: | Unknown |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 21 2004 12:00AM |
| Updated: | Jul 21 2004 12:00AM |
| Credit: | Most of the issues were discovered internally by Cisco. The ICMP packet handling vulnerability was reported to Cisco by a customer. |
| Vulnerable: |
Cisco ONS 15600 1.3 (0) Cisco ONS 15600 1.1 (1) Cisco ONS 15600 1.1 (0) Cisco ONS 15600 1.1 Cisco ONS 15600 1.0 Cisco ONS 15454SDH 4.6 (1) Cisco ONS 15454SDH 4.6 (0) Cisco ONS 15454SDH 4.5 Cisco ONS 15454SDH 4.1 (3) Cisco ONS 15454SDH 4.1 (2) Cisco ONS 15454SDH 4.1 (1) Cisco ONS 15454SDH 4.1 (0) Cisco ONS 15454SDH 4.0 (2) Cisco ONS 15454SDH 4.0 (1) Cisco ONS 15454SDH 4.0 (0) Cisco ONS 15454SDH 3.4 Cisco ONS 15454SDH 3.3 Cisco ONS 15454SDH 3.2 Cisco ONS 15454SDH 3.1 Cisco ONS 15454SDH 2.3 (5) Cisco ONS 15454 Optical Transport Platform 4.6 (1) Cisco ONS 15454 Optical Transport Platform 4.6 (0) Cisco ONS 15454 Optical Transport Platform 4.5 Cisco ONS 15454 Optical Transport Platform 4.1 (3) Cisco ONS 15454 Optical Transport Platform 4.1 (2) Cisco ONS 15454 Optical Transport Platform 4.1 (1) Cisco ONS 15454 Optical Transport Platform 4.1 (0) Cisco ONS 15454 Optical Transport Platform 4.0 (2) Cisco ONS 15454 Optical Transport Platform 4.0 (1) Cisco ONS 15454 Optical Transport Platform 4.0 Cisco ONS 15454 Optical Transport Platform 3.4 Cisco ONS 15454 Optical Transport Platform 3.3 Cisco ONS 15454 Optical Transport Platform 3.2 .0 Cisco ONS 15454 Optical Transport Platform 3.1 .0 Cisco ONS 15454 Optical Transport Platform 3.0 Cisco ONS 15454 Optical Transport Platform 2.3 (5) Cisco ONS 15327 4.6 (1) Cisco ONS 15327 4.6 (0) Cisco ONS 15327 4.1 (3) Cisco ONS 15327 4.1 (2) Cisco ONS 15327 4.1 (1) Cisco ONS 15327 4.1 (0) Cisco ONS 15327 4.0 (2) Cisco ONS 15327 4.0 (1) Cisco ONS 15327 4.0 Cisco ONS 15327 3.4 Cisco ONS 15327 3.3 Cisco ONS 15327 3.2 Cisco ONS 15327 3.1 Cisco ONS 15327 3.0 |
| Not Vulnerable: | |
Discussion
Cisco ONS Multiple Vulnerabilities
Cisco ONS platforms are prone to multiple vulnerabilities. Most of the reported issues are related to handling of malformed packets, resulting in a denial of service condition. However, an authentication bypass vulnerability has also been reported to affect some platforms.
Cisco ONS platforms are prone to multiple vulnerabilities. Most of the reported issues are related to handling of malformed packets, resulting in a denial of service condition. However, an authentication bypass vulnerability has also been reported to affect some platforms.
Exploit / POC
Cisco ONS Multiple Vulnerabilities
The denial of service issues may require an exploit but could also be triggered with publicly available packet crafting tools such as hping. The authentication bypass vulnerability does not require an exploit.
The denial of service issues may require an exploit but could also be triggered with publicly available packet crafting tools such as hping. The authentication bypass vulnerability does not require an exploit.
Solution / Fix
Cisco ONS Multiple Vulnerabilities
Solution:
Cisco has released an advisory (cisco-sa-20040721-ons) and updates to address these issues. Customers are advised to see the referenced advisory to determine if they are affected and for further details regarding obtaining and applying appropriate updates.
Solution:
Cisco has released an advisory (cisco-sa-20040721-ons) and updates to address these issues. Customers are advised to see the referenced advisory to determine if they are affected and for further details regarding obtaining and applying appropriate updates.
References
Cisco ONS Multiple Vulnerabilities
References:
References: