Cisco IOS Layer 2 Tunneling Protocol Denial Of Service Vulnerability

Bugtraq ID:	31358
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2008-3813
Remote:	Yes
Local:	No
Published:	Sep 24 2008 12:00AM
Updated:	Sep 24 2008 09:09PM
Credit:	The vulnerability was announced by Cisco.
Vulnerable:	Cisco IOS 12.4XV Cisco IOS 12.4XJ Cisco IOS 12.4T Cisco IOS 12.4SW Cisco IOS 12.4MR Cisco IOS 12.2SE Cisco IOS 12.2(37)SG Cisco IOS 12.2(37)SE Cisco IOS 12.2(33)SRB
Not Vulnerable:	Cisco IOS 12.4(16)MR Cisco IOS 12.4(15)T Cisco IOS 12.4(11)XW1 Cisco IOS 12.4(11)SW3 Cisco IOS 12.2(44)SG Cisco IOS 12.2(44)SE Cisco IOS 12.2(33)SRB1

Cisco IOS Layer 2 Tunneling Protocol Denial Of Service Vulnerability

Cisco IOS is prone to a denial-of-service vulnerability.

A remote attacker can exploit this issue to cause an affected device to reload.

This vulnerability is tracked by Cisco bug ID CSCsh48879 and by CVE-2008-3813.

Cisco IOS Layer 2 Tunneling Protocol Denial Of Service Vulnerability

An attacker can use readily available network tools to exploit this issue.

Cisco IOS Layer 2 Tunneling Protocol Denial Of Service Vulnerability

Solution:
A vendor advisory and updates are available. Please see the references for details.

Cisco IOS Layer 2 Tunneling Protocol Denial Of Service Vulnerability

References:

• Cisco Security Advisory: Cisco IOS Software Layer 2 Tunneling Protocol (L2TP) De (Cisco Systems Product Security Incident Response Team )
  
• Cisco Security Advisory: Cisco IOS Software Layer 2 Tunneling Protocol (L2TP) De (Cisco)