Cisco ONS 15216 OADM Management Plane Telnet Service Remote Denial Of Service Vulnerability
BID:14246
Info
Cisco ONS 15216 OADM Management Plane Telnet Service Remote Denial Of Service Vulnerability
| Bugtraq ID: | 14246 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 13 2005 12:00AM |
| Updated: | Jul 13 2005 12:00AM |
| Credit: | This issue was announced in a vendor advisory. |
| Vulnerable: |
Cisco ONS 15216 OADM 2.2.2 Cisco ONS 15216 OADM 2.0 |
| Not Vulnerable: |
Cisco ONS 15216 OADM 2.2.3 |
Discussion
Cisco ONS 15216 OADM Management Plane Telnet Service Remote Denial Of Service Vulnerability
The Cisco ONS 15216 OADM has separate data planes, one that exists solely for device management, and the other that exists for data transport purposes.
The Telnet service used to access the Cisco ONS 15216 OADM management interface may fail, if a maliciously crafted data stream is sent to a Cisco ONS 15216 OADM Telnet session.
When the vulnerability is triggered, the Telnet service will no longer respond to subsequent legitimate requests. However, the data plane (Network traffic that is being switched and transmitted by the device.) is not affected by this attack.
This vulnerability exists in the Cisco ONS 15216 OADM device that is running software release 2.2.2 and earlier software releases.
The Cisco ONS 15216 OADM has separate data planes, one that exists solely for device management, and the other that exists for data transport purposes.
The Telnet service used to access the Cisco ONS 15216 OADM management interface may fail, if a maliciously crafted data stream is sent to a Cisco ONS 15216 OADM Telnet session.
When the vulnerability is triggered, the Telnet service will no longer respond to subsequent legitimate requests. However, the data plane (Network traffic that is being switched and transmitted by the device.) is not affected by this attack.
This vulnerability exists in the Cisco ONS 15216 OADM device that is running software release 2.2.2 and earlier software releases.
Exploit / POC
Cisco ONS 15216 OADM Management Plane Telnet Service Remote Denial Of Service Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
Cisco ONS 15216 OADM Management Plane Telnet Service Remote Denial Of Service Vulnerability
Solution:
The vendor has released an advisory (cisco-sa-20050713-ons) and an updated software release (2.2.3), to address this vulnerability. Customers are advised to read the referenced advisory for further details in regard to obtaining and applying the updated software release.
Solution:
The vendor has released an advisory (cisco-sa-20050713-ons) and an updated software release (2.2.3), to address this vulnerability. Customers are advised to read the referenced advisory for further details in regard to obtaining and applying the updated software release.
References
Cisco ONS 15216 OADM Management Plane Telnet Service Remote Denial Of Service Vulnerability
References:
References: