Cisco IOS UDP Denial of Service Vulnerability

Bugtraq ID:	3096
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2001-1097
Remote:	Yes
Local:	No
Published:	Jul 25 2001 12:00AM
Updated:	Mar 19 2015 08:49AM
Credit:	Reported to Bugtraq by Stefan Laudat <[email protected]> on July 25, 2001.
Vulnerable:	Cisco IOS 12.0.7 Cisco IOS 12.0.6 Cisco IOS 12.0.5 Cisco IOS 12.0.4 Cisco IOS 12.0.3 Cisco IOS 12.0.2 Cisco IOS 12.0.1 Cisco IOS 12.2 Cisco IOS 12.1 Cisco IOS 12.0(7)T Cisco IOS 12.0(5) Cisco IOS 12.0(3) Cisco IOS 12.0
Not Vulnerable:

Cisco IOS UDP Denial of Service Vulnerability

A potential denial of service condition may exist in Cisco's IOS firmware.

The problem reportedly occurs when a large number of UDP packets are sent to device running IOS. This causes the system to use all available CPU resources and thus become unresponsive. The device may have to be reset manually if the attack is successful.

Cisco IOS UDP Denial of Service Vulnerability

The following proof of concept has been developed to trigger this vulnerability as well as other vulnerabilities in Cisco products:

• /data/vulnerabilities/exploits/ciscoMultipleVulnsExploit.pl

Cisco IOS UDP Denial of Service Vulnerability

References:

• Cisco Product Security Incident Response (Cisco Systems)