Cisco CNS Network Registrar DNS and DHCP Server Remote Denial of Service Vulnerabilities
BID:11793
Info
Cisco CNS Network Registrar DNS and DHCP Server Remote Denial of Service Vulnerabilities
| Bugtraq ID: | 11793 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 02 2004 12:00AM |
| Updated: | Dec 02 2004 12:00AM |
| Credit: | These issues were disclosed in the referenced vendor advisory. Discovery is credited to the Qualys Security Research Team. |
| Vulnerable: |
Cisco CNS Network Registrar 6.1.1 .3 Cisco CNS Network Registrar 6.1.1 .2 Cisco CNS Network Registrar 6.1.1 .1 Cisco CNS Network Registrar 6.1.1 Cisco CNS Network Registrar 6.1 Cisco CNS Network Registrar 6.0.5 .4 Cisco CNS Network Registrar 6.0.5 .3 Cisco CNS Network Registrar 6.0.5 .2 Cisco CNS Network Registrar 6.0.5 Cisco CNS Network Registrar 6.0.4 Cisco CNS Network Registrar 6.0.3 Cisco CNS Network Registrar 6.0.2 Cisco CNS Network Registrar 6.0.1 Cisco CNS Network Registrar 6.0 |
| Not Vulnerable: |
Cisco CNS Network Registrar 6.1.1 .4 |
Discussion
Cisco CNS Network Registrar DNS and DHCP Server Remote Denial of Service Vulnerabilities
Cisco CNS Network Registrar is a DNS/DHCP server offered by Cisco. It is available for Microsoft Windows, UNIX, and Linux platforms.
Cisco CNS Network Registrar is reported prone to multiple remote denial of service vulnerabilities. These issues affect the Domain Name Service and Dynamic Host Configuration Protocol server components of the CNS Network Registrar. It is reported that an attacker may cause a crash by sending a specially crafted packet sequence to an affected server.
These vulnerabilities only affect Cisco CNS Network Registrar for the Microsoft Windows platform. The first issue affects CNS Network Registrar versions 6.0 upto and including 6.1.1.3 and the second issue affects all versions including 6.1.1.3.
Cisco CNS Network Registrar is a DNS/DHCP server offered by Cisco. It is available for Microsoft Windows, UNIX, and Linux platforms.
Cisco CNS Network Registrar is reported prone to multiple remote denial of service vulnerabilities. These issues affect the Domain Name Service and Dynamic Host Configuration Protocol server components of the CNS Network Registrar. It is reported that an attacker may cause a crash by sending a specially crafted packet sequence to an affected server.
These vulnerabilities only affect Cisco CNS Network Registrar for the Microsoft Windows platform. The first issue affects CNS Network Registrar versions 6.0 upto and including 6.1.1.3 and the second issue affects all versions including 6.1.1.3.
Exploit / POC
Cisco CNS Network Registrar DNS and DHCP Server Remote Denial of Service Vulnerabilities
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
Cisco CNS Network Registrar DNS and DHCP Server Remote Denial of Service Vulnerabilities
Solution:
Cisco has released an advisory cisco-sa-20041202 to address these issues. Please see the advisory in Web references for more information.
Solution:
Cisco has released an advisory cisco-sa-20041202 to address these issues. Please see the advisory in Web references for more information.
References
Cisco CNS Network Registrar DNS and DHCP Server Remote Denial of Service Vulnerabilities
References:
References: