Cisco Catalyst SNMP Empty UDP Packet Denial of Service
BID:2689
Info
Cisco Catalyst SNMP Empty UDP Packet Denial of Service
| Bugtraq ID: | 2689 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | May 03 2001 12:00AM |
| Updated: | May 03 2001 12:00AM |
| Credit: | This vulnerability was announced to Bugtraq by bashis <[email protected]> on May 3, 2001. |
| Vulnerable: |
Cisco Catalyst 2900 12.0 (5.2)XU |
| Not Vulnerable: |
Cisco Catalyst 3500 12.0 (5.2)XU Cisco Catalyst 2900 11.2 (8.2)SA6 |
Discussion
Cisco Catalyst SNMP Empty UDP Packet Denial of Service
The Catalyst series switch is a scalable, high performance layers 2 and 3 switch manufactured by Cisco Systems. The Catalyst series ranges in size, and is designed for use in organizations sized from small business to large enterprise.
A problem with the switch firmware could allow a Denial of Service to legitimate users of network resources. Upon booting the switch with SNMP disabled, the service does not handle normal requests. However, by sending an empty UDP packet to the SNMP port, the switch ceases operating.
This problem makes it possible for a remote user to deny service to legitimate users of the switch.
The Catalyst series switch is a scalable, high performance layers 2 and 3 switch manufactured by Cisco Systems. The Catalyst series ranges in size, and is designed for use in organizations sized from small business to large enterprise.
A problem with the switch firmware could allow a Denial of Service to legitimate users of network resources. Upon booting the switch with SNMP disabled, the service does not handle normal requests. However, by sending an empty UDP packet to the SNMP port, the switch ceases operating.
This problem makes it possible for a remote user to deny service to legitimate users of the switch.
Exploit / POC
Cisco Catalyst SNMP Empty UDP Packet Denial of Service
The following exploit code is available:
The following exploit code is available:
Solution / Fix
Cisco Catalyst SNMP Empty UDP Packet Denial of Service
Solution:
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
Cisco Catalyst SNMP Empty UDP Packet Denial of Service
References:
References: