Cisco Service Control Engine SSH Server Multiple Denial of Service Vulnerabilities

Bugtraq ID:	29316
Class:	Unknown
CVE:	CVE-2008-0534 CVE-2008-0535 CVE-2008-0536
Remote:	Yes
Local:	No
Published:	May 21 2008 12:00AM
Updated:	May 22 2008 04:24PM
Credit:	The vendor disclosed these issues.
Vulnerable:	Cisco SCOS (Service Control Operating System) 3.0 Cisco SCOS (Service Control Operating System) 2.0 Cisco SCOS (Service Control Operating System) 1.0 Cisco SCE (Service Control Engine) 2000 Cisco SCE (Service Control Engine) 1000
Not Vulnerable:	Cisco SCOS (Service Control Operating System) 3.1.6

Cisco Service Control Engine SSH Server Multiple Denial of Service Vulnerabilities

Cisco SCE (Service Control Engine) devices are prone to multiple denial-of-service vulnerabilities.

Attackers can leverage these issues to disrupt system stability or cause devices to reload. Successful exploits will deny service to legitimate users.

SCE devices running versions prior to SCOS (Service Control Operating System) 3.1.6 may be affected.

Cisco Service Control Engine SSH Server Multiple Denial of Service Vulnerabilities

To exploit these issues, attackers can use readily available tools for generating network packets.

Cisco Service Control Engine SSH Server Multiple Denial of Service Vulnerabilities

Solution:
The vendor released an advisory and fixes to address these issues. Please see the references for more information.

Cisco Service Control Engine SSH Server Multiple Denial of Service Vulnerabilities

References:

• Cisco Homepage (Cisco)
  
• Cisco Security Advisory: Cisco Service Control Engine Denial of Service Vulnerab (Cisco)