Cisco IOS SSH Multiple Denial of Service Vulnerabilities
BID:29314
Info
Cisco IOS SSH Multiple Denial of Service Vulnerabilities
| Bugtraq ID: | 29314 |
| Class: | Unknown |
| CVE: |
CVE-2008-1159 |
| Remote: | Yes |
| Local: | No |
| Published: | May 21 2008 12:00AM |
| Updated: | May 22 2008 04:04PM |
| Credit: | The vendor disclosed these vulnerabilities. |
| Vulnerable: |
Cisco IOS 12.4XW Cisco IOS 12.4XV Cisco IOS 12.4XV Cisco IOS 12.4XK Cisco IOS 12.4XJ Cisco IOS 12.4XF Cisco IOS 12.4XE Cisco IOS 12.4T Cisco IOS 12.4SW Cisco IOS 12.4MR Cisco IOS 12.4MR Cisco IOS 12.4MR Cisco IOS 12.4(9)XG2 Cisco IOS 12.4(9)T5 Cisco IOS 12.4(9)T4 Cisco IOS 12.4(9)T3 Cisco IOS 12.4(9)T Cisco IOS 12.4(8d) Cisco IOS 12.4(8c) Cisco IOS 12.4(8b) Cisco IOS 12.4(8a) Cisco IOS 12.4(8) Cisco IOS 12.4(17) Cisco IOS 12.4(17) Cisco IOS 12.4(16a) Cisco IOS 12.4(16) Cisco IOS 12.4(15)XL2 Cisco IOS 12.4(15)TA4 Cisco IOS 12.4(15)T1 Cisco IOS 12.4(15)SW Cisco IOS 12.4(15)MD Cisco IOS 12.4(13e) Cisco IOS 12.4(13d) Cisco IOS 12.4(13c) Cisco IOS 12.4(13b) Cisco IOS 12.4(13a) Cisco IOS 12.4(12c) Cisco IOS 12.4(12) Cisco IOS 12.4(12) Cisco IOS 12.4(11)XV Cisco IOS 12.4(11)XJ4 Cisco IOS 12.4(11)XJ2 Cisco IOS 12.4(11)XJ Cisco IOS 12.4(11)T3 Cisco IOS 12.4(11)T2 Cisco IOS 12.4(11)T1 Cisco IOS 12.4(11)T Cisco IOS 12.4(11)T Cisco IOS 12.4(11)SW1 Cisco IOS 12.4(10c) Cisco IOS 12.4(10b) Cisco IOS 12.4(10) Cisco IOS 12.4(10) |
| Not Vulnerable: |
Cisco IOS 12.4(9)T6 Cisco IOS 12.4(16b) Cisco IOS 12.4(16)MR2 Cisco IOS 12.4(15)T2 Cisco IOS 12.4(15)SW1 Cisco IOS 12.4(11)XW6 Cisco IOS 12.4(11)T4 Cisco IOS 12.4 (20)T Cisco IOS 12.4 (18) Cisco IOS 12.4 (17a) Cisco IOS 12.4 (13f) |
Discussion
Cisco IOS SSH Multiple Denial of Service Vulnerabilities
Cisco IOS is prone to multiple remote denial-of-service vulnerabilities affecting the SSH (Secure Shell) implementation.
Successfully exploiting these issues allows remote attackers to generate spurious memory-access errors or cause the targeted device to reload. Repeated attacks will lead to denial-of-service conditions.
These issues are tracked by Cisco Bug IDs CSCsk42419, CSCsk60020, and CSCsh51293.
These issues affect devices running 12.4-based IOS releases that have SSH configured. Note that SSH is not configured by default.
Cisco IOS is prone to multiple remote denial-of-service vulnerabilities affecting the SSH (Secure Shell) implementation.
Successfully exploiting these issues allows remote attackers to generate spurious memory-access errors or cause the targeted device to reload. Repeated attacks will lead to denial-of-service conditions.
These issues are tracked by Cisco Bug IDs CSCsk42419, CSCsk60020, and CSCsh51293.
These issues affect devices running 12.4-based IOS releases that have SSH configured. Note that SSH is not configured by default.
Exploit / POC
Cisco IOS SSH Multiple Denial of Service Vulnerabilities
To exploit these issues, attackers use readily available utilities for generating network packets.
To exploit these issues, attackers use readily available utilities for generating network packets.
Solution / Fix
Cisco IOS SSH Multiple Denial of Service Vulnerabilities
Solution:
The vendor has released an advisory along with fixes. Please see the references for more information.
Solution:
The vendor has released an advisory along with fixes. Please see the references for more information.
References
Cisco IOS SSH Multiple Denial of Service Vulnerabilities
References:
References:
- Cisco IOS Software (Cisco Systems)
- Cisco Security Advisory: Cisco IOS Secure Shell Denial of Service (Cisco Systems Product Security Incident Response Team
- cisco-sa-20080521-ssh Cisco Security Advisory: Cisco IOS Secure Shell Denial of (Cisco)