Cisco IOS SGBP Remote Denial of Service Vulnerability

Bugtraq ID:	16303
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Jan 18 2006 12:00AM
Updated:	Feb 07 2006 08:54PM
Credit:	Reported by the vendor.
Vulnerable:	Cisco IOS 12.4XB Cisco IOS 12.4XA Cisco IOS 12.4T Cisco IOS 12.4MR Cisco IOS 12.4 Cisco IOS 12.3YX Cisco IOS 12.3YU Cisco IOS 12.3YT Cisco IOS 12.3YQ Cisco IOS 12.3YM Cisco IOS 12.3YK Cisco IOS 12.3YJ Cisco IOS 12.3YG Cisco IOS 12.3YF Cisco IOS 12.3XW Cisco IOS 12.3XU Cisco IOS 12.3XQ Cisco IOS 12.3XM Cisco IOS 12.3XJ Cisco IOS 12.3XI Cisco IOS 12.3XH Cisco IOS 12.3XF Cisco IOS 12.3XD Cisco IOS 12.3XB Cisco IOS 12.3T Cisco IOS 12.3BW Cisco IOS 12.3BC Cisco IOS 12.3B Cisco IOS 12.3 Cisco IOS 12.2ZN Cisco IOS 12.2ZJ Cisco IOS 12.2ZE Cisco IOS 12.2ZD Cisco IOS 12.2ZB Cisco IOS 12.2ZA Cisco IOS 12.2YZ Cisco IOS 12.2YY Cisco IOS 12.2YX Cisco IOS 12.2YW Cisco IOS 12.2YT Cisco IOS 12.2YN Cisco IOS 12.2YE Cisco IOS 12.2YD Cisco IOS 12.2XV Cisco IOS 12.2XT Cisco IOS 12.2XS Cisco IOS 12.2XL Cisco IOS 12.2XK Cisco IOS 12.2XG Cisco IOS 12.2XF Cisco IOS 12.2XC Cisco IOS 12.2XB Cisco IOS 12.2XA Cisco IOS 12.2T Cisco IOS 12.2SZ Cisco IOS 12.2SY Cisco IOS 12.2SU Cisco IOS 12.2S Cisco IOS 12.2MC Cisco IOS 12.2DX Cisco IOS 12.2DD Cisco IOS 12.2CX Cisco IOS 12.2BY Cisco IOS 12.2BW Cisco IOS 12.2BC Cisco IOS 12.2B Cisco IOS 12.2 Cisco IOS 12.1YD Cisco IOS 12.1YB Cisco IOS 12.1YA Cisco IOS 12.1XZ Cisco IOS 12.1XY Cisco IOS 12.1XX Cisco IOS 12.1XW Cisco IOS 12.1XU Cisco IOS 12.1XS Cisco IOS 12.1XQ Cisco IOS 12.1XM Cisco IOS 12.1XL Cisco IOS 12.1XI Cisco IOS 12.1XH Cisco IOS 12.1XD Cisco IOS 12.1XA Cisco IOS 12.1T Cisco IOS 12.1GB Cisco IOS 12.1GA Cisco IOS 12.1EZ Cisco IOS 12.1EX Cisco IOS 12.1EC Cisco IOS 12.1E Cisco IOS 12.1AA Cisco IOS 12.1 Cisco IOS 12.0XR Cisco IOS 12.0XN Cisco IOS 12.0XL Cisco IOS 12.0XK Cisco IOS 12.0XJ Cisco IOS 12.0XI Cisco IOS 12.0XH Cisco IOS 12.0XG Cisco IOS 12.0XE Cisco IOS 12.0XD Cisco IOS 12.0XC Cisco IOS 12.0XA Cisco IOS 12.0T Cisco IOS 12.0SC Cisco IOS 12.0S Cisco IOS 12.0
Not Vulnerable:

Cisco IOS SGBP Remote Denial of Service Vulnerability

Cisco IOS SGBP is prone to a remote denial of service vulnerability.

This issue arises on devices that have been configured to run SGBP.

A successful attack causes a device to hang and fail to respond to further requests. It should be noted that a system watchdog timer will detect this condition after a delay and restart the device.

Cisco IOS SGBP Remote Denial of Service Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Cisco IOS SGBP Remote Denial of Service Vulnerability

Solution:
Cisco has released advisory cisco-sa-20060118-sgbp to address this issue. Please see the referenced advisory for more information.

Cisco IOS SGBP Remote Denial of Service Vulnerability

References: