Cisco IOS OSPF Remote Denial Of Service Vulnerability

Bugtraq ID:	10971
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Aug 18 2004 12:00AM
Updated:	Aug 18 2004 12:00AM
Credit:	This vulnerability was announced by the vendor.
Vulnerable:	Cisco IOS 12.3XE Cisco IOS 12.3XC Cisco IOS 12.3XB Cisco IOS 12.3XA Cisco IOS 12.3T Cisco IOS 12.3BW Cisco IOS 12.3B Cisco IOS 12.3(9) Cisco IOS 12.3(7.7) Cisco IOS 12.3(7)T Cisco IOS 12.3(6a) Cisco IOS 12.3(6) Cisco IOS 12.3(6) Cisco IOS 12.3(5c) Cisco IOS 12.3(5b) Cisco IOS 12.3(5a)b Cisco IOS 12.3(5a) Cisco IOS 12.3(5)B1 Cisco IOS 12.3(5) Cisco IOS 12.3(4)XQ Cisco IOS 12.3(4)XK Cisco IOS 12.3(4)XH Cisco IOS 12.3(4)XG1 Cisco IOS 12.3(4)XD2 Cisco IOS 12.3(4)XD1 Cisco IOS 12.3(4)XD Cisco IOS 12.3(4)T4 Cisco IOS 12.3(4)T3 Cisco IOS 12.3(4)T2 Cisco IOS 12.3(4)T1 Cisco IOS 12.3(4)T1 Cisco IOS 12.3(4)T Cisco IOS 12.3(4)T Cisco IOS 12.3(4)EO1 Cisco IOS 12.3(3e) Cisco IOS 12.3(2)XC3 Cisco IOS 12.3(2)XC2 Cisco IOS 12.3(2)XC1 Cisco IOS 12.3(2)T3 Cisco IOS 12.3(1a) Cisco IOS 12.3 Cisco IOS 12.2(18)SW Cisco IOS 12.2(18)SV Cisco IOS 12.2(18)SE Cisco IOS 12.2(18)S Cisco IOS 12.2(18)EW Cisco IOS 12.2(15)ZO Cisco IOS 12.2(15)ZN Cisco IOS 12.2(15)ZL1 Cisco IOS 12.2(15)ZL Cisco IOS 12.2(15)ZK Cisco IOS 12.2(15)ZJ3 Cisco IOS 12.2(15)ZJ2 Cisco IOS 12.2(15)ZJ1 Cisco IOS 12.2(15)ZJ Cisco IOS 12.2(15)T5 Cisco IOS 12.2(15)T Cisco IOS 12.2(15)MC1 Cisco IOS 12.2(15)CX Cisco IOS 12.2(15)BZ Cisco IOS 12.2(15)BX Cisco IOS 12.2(15)BC1 Cisco IOS 12.2(15)BC Cisco IOS 12.2(15)B Cisco IOS 12.2(14)SZ2 Cisco IOS 12.2(14)SZ1 Cisco IOS 12.2(14)SZ Cisco IOS 12.2(13)ZH Cisco IOS 12.2(13)ZG Cisco IOS 12.2(13)ZF Cisco IOS 12.2(13)ZE Cisco IOS 12.2(13)ZD Cisco IOS 12.2(11)YV Cisco IOS 12.2(11)YU Cisco IOS 12.0(23)SZ Cisco IOS 12.0(23)SX Cisco IOS 12.0(22)SY Cisco IOS 12.0(22)S5 Cisco IOS 12.0(22)S4 Cisco IOS 12.0(22)S
Not Vulnerable:	Cisco IOS 12.2 Cisco IOS 12.1YJ Cisco IOS 12.1YI Cisco IOS 12.1YH Cisco IOS 12.1YF Cisco IOS 12.1YE Cisco IOS 12.1YD Cisco IOS 12.1YC Cisco IOS 12.1YB Cisco IOS 12.1YA Cisco IOS 12.1XZ Cisco IOS 12.1XY Cisco IOS 12.1XX Cisco IOS 12.1XW Cisco IOS 12.1XV Cisco IOS 12.1XU Cisco IOS 12.1XT Cisco IOS 12.1XS Cisco IOS 12.1XR Cisco IOS 12.1XQ Cisco IOS 12.1XP Cisco IOS 12.1XM Cisco IOS 12.1XL Cisco IOS 12.1XK Cisco IOS 12.1XJ Cisco IOS 12.1XI Cisco IOS 12.1XH Cisco IOS 12.1XG Cisco IOS 12.1XF Cisco IOS 12.1XE Cisco IOS 12.1XD Cisco IOS 12.1XC Cisco IOS 12.1XB Cisco IOS 12.1XA Cisco IOS 12.1X(l) Cisco IOS 12.1T Cisco IOS 12.1T Cisco IOS 12.1M Cisco IOS 12.1EZ Cisco IOS 12.1EY Cisco IOS 12.1EX Cisco IOS 12.1EW Cisco IOS 12.1EV Cisco IOS 12.1EU Cisco IOS 12.1EO Cisco IOS 12.1EC Cisco IOS 12.1EB Cisco IOS 12.1EB Cisco IOS 12.1EA Cisco IOS 12.1E Cisco IOS 12.1DC Cisco IOS 12.1DB Cisco IOS 12.1DA Cisco IOS 12.1CX Cisco IOS 12.1AZ Cisco IOS 12.1AY Cisco IOS 12.1AY Cisco IOS 12.1AX Cisco IOS 12.1AX Cisco IOS 12.1AA Cisco IOS 12.10S Cisco IOS 12.1(9a) Cisco IOS 12.1(9)EX3 Cisco IOS 12.1(9)EX Cisco IOS 12.1(9)E3 Cisco IOS 12.1(9)E Cisco IOS 12.1(9)AA Cisco IOS 12.1(9) Cisco IOS 12.1(8c) Cisco IOS 12.1(8b)EX4 Cisco IOS 12.1(8b)E9 Cisco IOS 12.1(8b)E8 Cisco IOS 12.1(8b)E18 Cisco IOS 12.1(8b)E16 Cisco IOS 12.1(8b)E15 Cisco IOS 12.1(8b)E14 Cisco IOS 12.1(8a)EX Cisco IOS 12.1(8a)EW1 Cisco IOS 12.1(8a)EW Cisco IOS 12.1(8a)E Cisco IOS 12.1(8)EA2b Cisco IOS 12.1(8)EA1b Cisco IOS 12.1(8)E Cisco IOS 12.1(8)AA1 Cisco IOS 12.1(8) Cisco IOS 12.1(7b) Cisco IOS 12.1(7a)EY3 Cisco IOS 12.1(7a)EY Cisco IOS 12.1(7a)E6 Cisco IOS 12.1(7)EC Cisco IOS 12.1(7)DA3 Cisco IOS 12.1(7)DA2 Cisco IOS 12.1(7)CX Cisco IOS 12.1(7) Cisco IOS 12.1(6a) Cisco IOS 12.1(6.5)EC3 Cisco IOS 12.1(6)EZ2 Cisco IOS 12.1(6)EZ1 Cisco IOS 12.1(6)EY Cisco IOS 12.1(6)EA2c Cisco IOS 12.1(6)EA2b Cisco IOS 12.1(6)EA2a Cisco IOS 12.1(6)EA2 Cisco IOS 12.1(6)EA1a Cisco IOS 12.1(6)EA1 Cisco IOS 12.1(6)E8 Cisco IOS 12.1(6)E12 Cisco IOS 12.1(5e) Cisco IOS 12.1(5c)EX Cisco IOS 12.1(5c)E12 Cisco IOS 12.1(5a)E Cisco IOS 12.1(5)YI1 Cisco IOS 12.1(5)YI Cisco IOS 12.1(5)YH3 Cisco IOS 12.1(5)YH Cisco IOS 12.1(5)YF4 Cisco IOS 12.1(5)YF2 Cisco IOS 12.1(5)YF Cisco IOS 12.1(5)YD6 Cisco IOS 12.1(5)YD2 Cisco IOS 12.1(5)YD Cisco IOS 12.1(5)YC2 Cisco IOS 12.1(5)YC1 Cisco IOS 12.1(5)YC Cisco IOS 12.1(5)YB5 Cisco IOS 12.1(5)YB4 Cisco IOS 12.1(5)YB Cisco IOS 12.1(5)YA2 Cisco IOS 12.1(5)YA Cisco IOS 12.1(5)XY6 Cisco IOS 12.1(5)XV5 Cisco IOS 12.1(5)XV4 Cisco IOS 12.1(5)XV3 Cisco IOS 12.1(5)XV Cisco IOS 12.1(5)XU1 Cisco IOS 12.1(5)XS2 Cisco IOS 12.1(5)XS Cisco IOS 12.1(5)XR2 Cisco IOS 12.1(5)XM7 Cisco IOS 12.1(5)XM4 Cisco IOS 12.1(5)XM Cisco IOS 12.1(5)XG5 Cisco IOS 12.1(5)T9 Cisco IOS 12.1(5)T15 Cisco IOS 12.1(5)T12 Cisco IOS 12.1(5)T Cisco IOS 12.1(5)EY Cisco IOS 12.1(5)DC2 Cisco IOS 12.1(5)DC Cisco IOS 12.1(5)DB1 Cisco IOS 12.1(5)DA1 Cisco IOS 12.1(4a) Cisco IOS 12.1(4.3)T Cisco IOS 12.1(4)XZ7 Cisco IOS 12.1(4)XZ Cisco IOS 12.1(4)XM4 Cisco IOS 12.1(4)EA1e Cisco IOS 12.1(4)E3 Cisco IOS 12.1(4)DC2 Cisco IOS 12.1(4)DC Cisco IOS 12.1(4)DB2 Cisco IOS 12.1(4)DB1 Cisco IOS 12.1(4)DB Cisco IOS 12.1(4) Cisco IOS 12.1(3b) Cisco IOS 12.1(3a)XI8 Cisco IOS 12.1(3a)E8 Cisco IOS 12.1(3a)E7 Cisco IOS 12.1(3)XT3 Cisco IOS 12.1(3)XT Cisco IOS 12.1(3)XQ Cisco IOS 12.1(3)XP4 Cisco IOS 12.1(3)XP Cisco IOS 12.1(3)XI Cisco IOS 12.1(3)DC2 Cisco IOS 12.1(3)DB1 Cisco IOS 12.1(2b) Cisco IOS 12.1(22)EB Cisco IOS 12.1(22)E1 Cisco IOS 12.1(22) Cisco IOS 12.1(20)EW2 Cisco IOS 12.1(20)EW1 Cisco IOS 12.1(20)EW Cisco IOS 12.1(20)EO1 Cisco IOS 12.1(20)EO Cisco IOS 12.1(20)EC2 Cisco IOS 12.1(20)EC1 Cisco IOS 12.1(20)EC Cisco IOS 12.1(20)EA1a Cisco IOS 12.1(20)EA1 Cisco IOS 12.1(20)E3 Cisco IOS 12.1(20)E2 Cisco IOS 12.1(20)E2 Cisco IOS 12.1(20)E2 Cisco IOS 12.1(20)E1 Cisco IOS 12.1(20)E Cisco IOS 12.1(20)E Cisco IOS 12.1(20) Cisco IOS 12.1(2)XF5 Cisco IOS 12.1(2)XF4 Cisco IOS 12.1(2)XF Cisco IOS 12.1(2)E1 Cisco IOS 12.1(1c) Cisco IOS 12.1(1a)T1 Cisco IOS 12.1(19.3)E Cisco IOS 12.1(19)FC1 Cisco IOS 12.1(19)EW Cisco IOS 12.1(19)EC Cisco IOS 12.1(19)EC Cisco IOS 12.1(19)E6 Cisco IOS 12.1(19)E Cisco IOS 12.1(18.4) Cisco IOS 12.1(15)BC1 Cisco IOS 12.1(14)EB Cisco IOS 12.1(14)EA1 Cisco IOS 12.1(14)E9 Cisco IOS 12.1(14)E4 Cisco IOS 12.1(14)E4 Cisco IOS 12.1(14)E10 Cisco IOS 12.1(14)E1 Cisco IOS 12.1(13.4)E Cisco IOS 12.1(13)EX2 Cisco IOS 12.1(13)EW Cisco IOS 12.1(13)EA1c Cisco IOS 12.1(13)EA1 Cisco IOS 12.1(13)E7 Cisco IOS 12.1(13)E3 Cisco IOS 12.1(13)E13 Cisco IOS 12.1(13)E12 Cisco IOS 12.1(13)E1 Cisco IOS 12.1(13)AY Cisco IOS 12.1(13) Cisco IOS 12.1(12c)EV01 Cisco IOS 12.1(12c)EC Cisco IOS 12.1(12c)E7 Cisco IOS 12.1(12b) Cisco IOS 12.1(12)E Cisco IOS 12.1(11b)E14 Cisco IOS 12.1(11b)E12 Cisco IOS 12.1(11b)E Cisco IOS 12.1(11b) Cisco IOS 12.1(11)EC Cisco IOS 12.1(11)EA1 Cisco IOS 12.1(11)E Cisco IOS 12.1(11) Cisco IOS 12.1(10a) Cisco IOS 12.1(10)EY Cisco IOS 12.1(10)EX Cisco IOS 12.1(10)EC1 Cisco IOS 12.1(10)E4 Cisco IOS 12.1(10)E Cisco IOS 12.1(10)AA Cisco IOS 12.1(1.3)T Cisco IOS 12.1(1)T Cisco IOS 12.1(1)EX Cisco IOS 12.1(1)E5 Cisco IOS 12.1(1)DC2 Cisco IOS 12.1(1)DC Cisco IOS 12.1(1)DB2 Cisco IOS 12.1(1)DB Cisco IOS 12.1(1) Cisco IOS 12.1 Cisco IOS 12.0(5)T2 Cisco IOS 12.0(14) Cisco IOS 12.0(12) Cisco IOS 12.0(10) Cisco IOS 11.3(8)T1 Cisco IOS 11.2(18) Cisco IOS 11.2(16)P Cisco IOS 11.2(16) Cisco IOS 11.2(15a)P Cisco IOS 11.2(11) Cisco IOS 11.1(5) Cisco IOS 11.1(24) Cisco IOS 11.1(22) Cisco IOS 11.1(18) Cisco IOS 11.1(17) Cisco IOS 11.1(16) Cisco IOS 11.1(14) Cisco IOS 11.1(12) Cisco IOS 11.1(11)

Cisco IOS OSPF Remote Denial Of Service Vulnerability

Cisco IOS is reported prone to a remote denial of service vulnerability.

It is reported that the vulnerability manifests when a malformed Open Shortest Path First (OSPF) packet is handled by the vulnerable router.

A remote attacker may exploit this condition in multiple routers that reside on the same network segment as the attacker, to trigger a device reset. The attacker may continuously transmit malicious OSPF packets to the target routers in order to effectively deny network services to legitimate hosts.

Cisco IOS OSPF Remote Denial Of Service Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Cisco IOS OSPF Remote Denial Of Service Vulnerability

Solution:
The vendor has released an updated advisory (cisco-sa-20040818-ospf) and updated fix information to address this issue, please see the referenced advisory for further details regarding obtaining and applying appropriate updates.

Cisco IOS OSPF Remote Denial Of Service Vulnerability

References:

• cisco-sa-20040818-ospf - Cisco IOS Malformed OSPF Packet Causes Reload (Cisco)
  
• Protecting Your Core: Infrastructure Protection Access Control Lists (Cisco)
  
• Sample Configuration for Authentication in OSPF (Cisco)