Cisco IOS Virtual Private Dial-up Network Multiple Denial of Service Vulnerabilities

Bugtraq ID:	28460
Class:	Design Error
CVE:	CVE-2008-1151 CVE-2008-1150
Remote:	Yes
Local:	No
Published:	Mar 26 2008 12:00AM
Updated:	Mar 26 2008 08:49PM
Credit:	Martin Kluge of Elxsi Security
Vulnerable:	Cisco IOS 12.2YZ Cisco IOS 12.2YX Cisco IOS 12.2YO Cisco IOS 12.2YE Cisco IOS 12.2YC Cisco IOS 12.2XV Cisco IOS 12.2XU Cisco IOS 12.2XT Cisco IOS 12.2XS Cisco IOS 12.2XQ Cisco IOS 12.2XK Cisco IOS 12.2XJ Cisco IOS 12.2XI Cisco IOS 12.2XH Cisco IOS 12.2XG Cisco IOS 12.2XF Cisco IOS 12.2XE Cisco IOS 12.2XD Cisco IOS 12.2XC Cisco IOS 12.2XB Cisco IOS 12.2XA Cisco IOS 12.2T Cisco IOS 12.2SY Cisco IOS 12.2SX Cisco IOS 12.2SU Cisco IOS 12.2S Cisco IOS 12.2DX Cisco IOS 12.2DA Cisco IOS 12.2BY Cisco IOS 12.2B Cisco IOS 12.2 Cisco IOS 12.1YI Cisco IOS 12.1YF Cisco IOS 12.1YE Cisco IOS 12.1YD Cisco IOS 12.1YC Cisco IOS 12.1YB Cisco IOS 12.1YA Cisco IOS 12.1XY Cisco IOS 12.1XV Cisco IOS 12.1XT Cisco IOS 12.1XS Cisco IOS 12.1XR Cisco IOS 12.1XQ Cisco IOS 12.1XP Cisco IOS 12.1XM Cisco IOS 12.1XL Cisco IOS 12.1XJ Cisco IOS 12.1T Cisco IOS 12.1EZ Cisco IOS 12.1EX Cisco IOS 12.1EC Cisco IOS 12.1EA Cisco IOS 12.1E Cisco IOS 12.1DC Cisco IOS 12.1AY
Not Vulnerable:	Cisco IOS 12.4(18a) Cisco IOS 12.4(18a) Cisco IOS 12.3T Cisco IOS 12.3(26) Cisco IOS 12.3(23)BC1 Cisco IOS 12.2BC Cisco IOS 12.2(8)T Cisco IOS 12.2(8)BY Cisco IOS 12.2(8)BW1a Cisco IOS 12.2(4)BW1 Cisco IOS 12.2(4)B5 Cisco IOS 12.2(33)SRC Cisco IOS 12.2(25)S15 Cisco IOS 12.2(2)XB5 Cisco IOS 12.2(2)XB5 Cisco IOS 12.2(18)SXF13 Cisco IOS 12.2(18)2 Cisco IOS 12.2(15)T4e Cisco IOS 12.1(22)EA11 Cisco IOS 12.1(22)EA11 Cisco IOS 12.1(22)AY1 Cisco IOS 12.1(11)EA1

Cisco IOS Virtual Private Dial-up Network Multiple Denial of Service Vulnerabilities

Cisco IOS is prone to multiple denial-of-service vulnerabilities that occur in the virtual private dial-up (VPDN) when the Point-to-Point Tunneling Protocol (PPTP) is enabled.

Successfully exploiting these issues may cause a memory leak or prevent the establishment of VPDN connections, denying service to legitimate users.

Cisco IOS Virtual Private Dial-up Network Multiple Denial of Service Vulnerabilities

A specific exploit is not required. The attacker would only need to establish a PPTP session with an affected device.

Cisco IOS Virtual Private Dial-up Network Multiple Denial of Service Vulnerabilities

Solution:
The vendor has released an advisory and fixes. Please see the referenced advisory for details.

Cisco IOS Virtual Private Dial-up Network Multiple Denial of Service Vulnerabilities

References:

• Cisco IOS Homepage (Cisco Systems)
  
• Cisco Security Advisory: Cisco IOS Virtual Private Dial-up Network Denial of Ser (Cisco Systems Product Security Incident Response Team )
  
• Cisco Security Advisory: Cisco IOS Virtual Private Dial-up Network Denial of Ser (Cisco)