Cisco ONS Control Card Remote Denial of Service Vulnerability

Bugtraq ID:	33261
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2008-3818
Remote:	Yes
Local:	No
Published:	Jan 14 2009 12:00AM
Updated:	Jan 16 2009 04:12PM
Credit:	Reported by the vendor
Vulnerable:	Cisco ONS 15600 0 Cisco ONS 15454SDH 0 Cisco ONS 15454 0 Cisco ONS 15327 0 Cisco ONS 15310-MA 0 Cisco ONS 15310 0
Not Vulnerable:

Cisco ONS Control Card Remote Denial of Service Vulnerability

Cisco ONS is prone to a denial-of-service vulnerability when handling specially crafted TCP traffic.

An attacker can exploit this issue to cause the control cards in the affected devices to reload, denying service to legitimate users.

The following devices are affected:

Cisco ONS 15310-CL and 15310-MA
Cisco ONS 15327
Cisco ONS 15454 and 15454 SDH
Cisco ONS 15600

This issue is being tracked by Cisco BugID CSCsr41128.

Cisco ONS Control Card Remote Denial of Service Vulnerability

An attacker can use readily available network utilities to exploit this issue.

Cisco ONS Control Card Remote Denial of Service Vulnerability

Solution:
The vendor has released updates and an advisory. Please see the references for more information.

Cisco ONS Control Card Remote Denial of Service Vulnerability

References:

• Cisco Applied Mitigation Bulletin: Identifying and Mitigating Exploitation of th (Cisco)
  
• Cisco Homepage (Cisco )
  
• Cisco Security Advisory: Cisco ONS Platform Crafted Packet Vulnerability (Cisco)
  
• Cisco Security Advisory: Cisco ONS Platform Crafted Packet Vulnerability (Cisco Systems Product Security Incident Response Team )