Cisco IOS IPS 'SERVICE.DNS' Remote Denial of Service Vulnerability
BID:31364
Info
Cisco IOS IPS 'SERVICE.DNS' Remote Denial of Service Vulnerability
| Bugtraq ID: | 31364 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: |
CVE-2008-2739 |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 24 2008 12:00AM |
| Updated: | Sep 24 2008 08:19PM |
| Credit: | The discoverer of this issue is not known; this issue was disclosed by Cisco. |
| Vulnerable: |
Cisco IOS 12.4YA Cisco IOS 12.4XZ Cisco IOS 12.4XY Cisco IOS 12.4XW Cisco IOS 12.4XV Cisco IOS 12.4XT Cisco IOS 12.4XK Cisco IOS 12.4XJ Cisco IOS 12.4XF Cisco IOS 12.4XE Cisco IOS 12.4XD Cisco IOS 12.4XC Cisco IOS 12.4XA Cisco IOS 12.4T Cisco IOS 12.4MR Cisco IOS 12.4 Cisco IOS 12.3ZA Cisco IOS 12.3YZ Cisco IOS 12.3YT Cisco IOS 12.3YS Cisco IOS 12.3YM Cisco IOS 12.3YK Cisco IOS 12.3YI Cisco IOS 12.3YH Cisco IOS 12.3YG Cisco IOS 12.3YD Cisco IOS 12.3YA Cisco IOS 12.3XX Cisco IOS 12.3XS Cisco IOS 12.3XQ Cisco IOS 12.3XL Cisco IOS 12.3T |
| Not Vulnerable: |
Cisco IOS 12.4(4)XD11 Cisco IOS 12.4(21) Cisco IOS 12.4(20)YA1 Cisco IOS 12.4(20)T Cisco IOS 12.4(19a) Cisco IOS 12.4(19)MR Cisco IOS 12.4(18b) Cisco IOS 12.4(15)XZ2 Cisco IOS 12.4(15)XY4 Cisco IOS 12.4(15)T6 Cisco IOS 12.4(11)XW9 Cisco IOS 12.3(8)YG7 Cisco IOS 12.3(14)YM13 |
Discussion
Cisco IOS IPS 'SERVICE.DNS' Remote Denial of Service Vulnerability
Cisco IOS Intrusion Prevention System is prone to a denial-of-service vulnerability when processing certain IPS signatures.
A successful exploit will cause an affected device to crash, denying service to legitimate users.
Cisco IOS Intrusion Prevention System is prone to a denial-of-service vulnerability when processing certain IPS signatures.
A successful exploit will cause an affected device to crash, denying service to legitimate users.
Exploit / POC
Cisco IOS IPS 'SERVICE.DNS' Remote Denial of Service Vulnerability
Attackers can use readily available network utilities to exploit this issue.
Attackers can use readily available network utilities to exploit this issue.
Solution / Fix
Cisco IOS IPS 'SERVICE.DNS' Remote Denial of Service Vulnerability
Solution:
A vendor advisory and updates are available. Please see the references for details.
Solution:
A vendor advisory and updates are available. Please see the references for details.
References
Cisco IOS IPS 'SERVICE.DNS' Remote Denial of Service Vulnerability
References:
References:
- Cisco IOS Homepage (Cisco Systems)
- Cisco Security Advisory: Cisco IOS IPS Denial of Service Vulnerability (Cisco Systems Product Security Incident Response Team
- Cisco Security Advisory: Cisco IOS IPS Denial of Service Vulnerability (Cisco)