Cisco IOS Multicast Virtual Private Network MDT Data Join Handling Vulnerability

Bugtraq ID:	28464
Class:	Design Error
CVE:	CVE-2008-1156
Remote:	Yes
Local:	No
Published:	Mar 26 2008 12:00AM
Updated:	Mar 26 2008 09:19PM
Credit:	The vendor disclosed this issue.
Vulnerable:	Cisco IOS 12.4XT Cisco IOS 12.4XK Cisco IOS 12.4XJ Cisco IOS 12.4XG Cisco IOS 12.4XE Cisco IOS 12.4XD Cisco IOS 12.4XC Cisco IOS 12.4XB Cisco IOS 12.4XA Cisco IOS 12.4T Cisco IOS 12.4SW Cisco IOS 12.4MR Cisco IOS 12.4MD Cisco IOS 12.3YZ Cisco IOS 12.3YX Cisco IOS 12.3YU Cisco IOS 12.3YT Cisco IOS 12.3YS Cisco IOS 12.3YQ Cisco IOS 12.3YK Cisco IOS 12.3YI Cisco IOS 12.3YH Cisco IOS 12.3YG Cisco IOS 12.3YF Cisco IOS 12.3YD Cisco IOS 12.3YA Cisco IOS 12.3XY Cisco IOS 12.3XW Cisco IOS 12.3XU Cisco IOS 12.3XS Cisco IOS 12.3XR Cisco IOS 12.3XQ Cisco IOS 12.3XK Cisco IOS 12.3XJ Cisco IOS 12.3XI Cisco IOS 12.3XH Cisco IOS 12.3XG Cisco IOS 12.3XF Cisco IOS 12.3XE Cisco IOS 12.3XD Cisco IOS 12.3XC Cisco IOS 12.3XB Cisco IOS 12.3XA Cisco IOS 12.3VA Cisco IOS 12.3TPC Cisco IOS 12.3T Cisco IOS 12.3JK Cisco IOS 12.3BW Cisco IOS 12.3BC Cisco IOS 12.3B Cisco IOS 12.3 Cisco IOS 12.2ZY Cisco IOS 12.2ZP Cisco IOS 12.2ZL Cisco IOS 12.2ZJ Cisco IOS 12.2ZH Cisco IOS 12.2ZG Cisco IOS 12.2ZF Cisco IOS 12.2ZE Cisco IOS 12.2ZC Cisco IOS 12.2ZA Cisco IOS 12.2YZ Cisco IOS 12.2YX Cisco IOS 12.2YV Cisco IOS 12.2YU Cisco IOS 12.2YT Cisco IOS 12.2YR Cisco IOS 12.2YQ Cisco IOS 12.2YN Cisco IOS 12.2YM Cisco IOS 12.2YL Cisco IOS 12.2YJ Cisco IOS 12.2YH Cisco IOS 12.2XN Cisco IOS 12.2UZ Cisco IOS 12.2T Cisco IOS 12.2SZ Cisco IOS 12.2SY Cisco IOS 12.2SXF Cisco IOS 12.2SXE Cisco IOS 12.2SXD Cisco IOS 12.2SXB Cisco IOS 12.2SXA Cisco IOS 12.2SX Cisco IOS 12.2SW Cisco IOS 12.2SV Cisco IOS 12.2SU Cisco IOS 12.2SRB Cisco IOS 12.2SRA Cisco IOS 12.2SO Cisco IOS 12.2SM Cisco IOS 12.2SGA Cisco IOS 12.2SG Cisco IOS 12.2SEG Cisco IOS 12.2SEE Cisco IOS 12.2SED Cisco IOS 12.2SED Cisco IOS 12.2SEC Cisco IOS 12.2SEB Cisco IOS 12.2SEA Cisco IOS 12.2SE Cisco IOS 12.2SBC Cisco IOS 12.2S Cisco IOS 12.2MC Cisco IOS 12.2JA Cisco IOS 12.2IXD Cisco IOS 12.2IXC Cisco IOS 12.2IXB Cisco IOS 12.2IXA Cisco IOS 12.2FZ Cisco IOS 12.2EY Cisco IOS 12.2EX Cisco IOS 12.2EWA Cisco IOS 12.2EW Cisco IOS 12.2EU Cisco IOS 12.2CX Cisco IOS 12.2BZ Cisco IOS 12.2BC Cisco IOS 12.2B Cisco IOS 12.0SZ Cisco IOS 12.0SY Cisco IOS 12.0SX Cisco IOS 12.0S
Not Vulnerable:	Cisco IOS 12.4(9)XG2 Cisco IOS 12.4(6)XT2 Cisco IOS 12.4(4)XD10 Cisco IOS 12.4(18a) Cisco IOS 12.4(16)MR2 Cisco IOS 12.4(15)TA4 Cisco IOS 12.4(15)SW Cisco IOS 12.4(15)MD Cisco IOS 12.3(8)JK1 Cisco IOS 12.3(7)XR8 Cisco IOS 12.3(26) Cisco IOS 12.3(23)BC1 Cisco IOS 12.3(2)XA7 Cisco IOS 12.3(14)YX11 Cisco IOS 12.3(14)YM12 Cisco IOS 12.2(44)SG Cisco IOS 12.2(44)SG Cisco IOS 12.2(44)SE1 Cisco IOS 12.2(40)EX1 Cisco IOS 12.2(33)SRB3 Cisco IOS 12.2(33)SRA7 Cisco IOS 12.2(31)SGA5 Cisco IOS 12.2(29b)SV Cisco IOS 12.2(29)SVD Cisco IOS 12.2(28)SB12 Cisco IOS 12.2(25)SEG4 Cisco IOS 12.2(25)S15 Cisco IOS 12.2(25)EWA13 Cisco IOS 12.2(18)SXF13 Cisco IOS 12.0(32)SY5 Cisco IOS 12.0(32)S10 Cisco IOS 12.0(1)S

Cisco IOS Multicast Virtual Private Network MDT Data Join Handling Vulnerability

Cisco IOS Multicast Virtual Private Network (MVPN) is prone to a vulnerability when handling specially crafted Multicast Distribution Tree (MDT) messages.

Attackers can leverage this issue to create extra multicast states on affected routers or to receive multicast traffic from different Multiprotocol Label Switching (MPLS) VPNs even when they are not connected to the same router. Information gained could aid in further attacks.

Cisco IOS Multicast Virtual Private Network MDT Data Join Handling Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]

Cisco IOS Multicast Virtual Private Network MDT Data Join Handling Vulnerability

Solution:
The vendor released an advisory and fixes. Please see the references for more information.

Cisco IOS Multicast Virtual Private Network MDT Data Join Handling Vulnerability

References:

• Cisco Homepage (Cisco )
  
• Cisco Security Advisory: Cisco IOS Multicast Virtual Private Network (MVPN) Data (Cisco Systems Product Security Incident Response Team )
  
• Cisco IOS Multicast Virtual Private Network (MVPN) Data Leak (Cisco)