Cisco Global Site Selector DNS Server Remote Denial Of Service Vulnerability

Bugtraq ID:	33152
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2008-3819
Remote:	Yes
Local:	No
Published:	Jan 07 2009 12:00AM
Updated:	Nov 12 2009 08:36PM
Credit:	This issue was disclosed by the vendor.
Vulnerable:	Cisco GSS Global Site Selector 4491 1.2 Cisco GSS Global Site Selector 4490 1.2 Cisco GSS Global Site Selector 4480 1.2 Cisco GSS 4492R Global Site Selector 0 Cisco GSS 4492 Global Site Selector 0 Cisco GSS 4491 Global Site Selector 0 Cisco GSS 4490 Global Site Selector 0 Cisco GSS 4480 Global Site Selector
Not Vulnerable:

Cisco Global Site Selector DNS Server Remote Denial Of Service Vulnerability

Cisco Global Site Selector is prone to a remote denial-of-service vulnerability when handling specific DNS requests.

A remote attacker may exploit this issue to crash the vulnerable DNS server, resulting in a denial-of-service condition.

This issue is documented in Cisco Bug ID CSCsj70093.

The following are vulnerable to this issue when running system software prior to version 3.0(1):

Cisco GSS 4480 Global Site Selector
Cisco GSS 4490 Global Site Selector
Cisco GSS 4491 Global Site Selector
Cisco GSS 4492R Global Site Selector

Cisco Global Site Selector DNS Server Remote Denial Of Service Vulnerability

Attackers may exploit this issue using readily available tools.

Cisco Global Site Selector DNS Server Remote Denial Of Service Vulnerability

Solution:
The vendor has released updates. Please see the references for details.

Cisco Global Site Selector DNS Server Remote Denial Of Service Vulnerability

References:

• Cisco GSS 4400 Series Global Site Selector Appliances Homepage (Cisco)
  
• Cisco Security Advisory: Cisco Global Site Selector Appliances DNS Vulnerability (Cisco Systems Product Security Incident Response Team )