Cisco IOS Malformed PPTP Packet Denial of Service Vulnerability

Bugtraq ID:	3022
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Jul 12 2001 12:00AM
Updated:	Jul 12 2001 12:00AM
Credit:	Published in a Cisco Security Advisory on July 12, 2001.
Vulnerable:	Cisco IOS 12.2XQ Cisco IOS 12.2XH Cisco IOS 12.2XE Cisco IOS 12.2XD Cisco IOS 12.2XA Cisco IOS 12.2T Cisco IOS 12.2 Cisco IOS 12.1YD Cisco IOS 12.1YC Cisco IOS 12.1YA Cisco IOS 12.1T Cisco IOS 12.1EZ Cisco IOS 12.1E
Not Vulnerable:

Cisco IOS Malformed PPTP Packet Denial of Service Vulnerability

IOS is router firmware developed and distributed by Cisco Systems. IOS functions on numerous Cisco devices, including routers and switches.

A problem in IOS releases supporting the Point to Point Tunneling Protocol (PPTP) could make it possible for remote users to cause a Cisco router to crash. The problem occurs when a malformed PPTP packet is sent to port 1723 on the router. If this occurs, the router must be reset to regain normal functionality.

Cisco IOS Malformed PPTP Packet Denial of Service Vulnerability

Solution:
Vendor-supplied updates that rectify this issue are available:


Cisco IOS 12.1YC

• Cisco IOS 12.1(5)YC1
  


• Cisco IOS 12.2(1.1)
  

Cisco IOS 12.1E

• Cisco IOS 12.1(8a)E
  

Cisco IOS 12.1EZ

• Cisco IOS 12.1(6)EZ2
  

Cisco IOS 12.1T

• Cisco IOS 12.2(3)
  

Cisco IOS 12.2

• Cisco IOS 12.2(1.1)
  


• Cisco IOS 12.2(3)
  

Cisco IOS 12.2XQ

• Cisco IOS 12.2(1)XQ
  

Cisco IOS 12.2XH

• Cisco IOS 12.2(1)XH
  

Cisco IOS 12.2XD

• Cisco IOS 12.2(1)XD1
  

Cisco IOS 12.1YA

• Cisco IOS 12.2(2)XB
  

Cisco IOS 12.2XA

• Cisco IOS 12.2(2)XA
  

Cisco IOS 12.1YD

• Cisco IOS 12.1(5)YD2
  


• Cisco IOS 12.2(1.1)
  

Cisco IOS 12.2XE

• Cisco IOS 12.2(1)XE