Cisco Discovery Protocol Neighbor Announcment Denial of Service Vulnerability

Bugtraq ID:	3412
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Oct 09 2001 12:00AM
Updated:	Oct 09 2001 12:00AM
Credit:	This vulnerability was discovered by FX <[email protected]>, and announced via Bugtraq on October 9, 2001.
Vulnerable:	Cisco IOS 12.0.19 Cisco IOS 11.3.11 b Cisco IOS 12.1 Cisco IOS 12.0(5.1)XP Cisco IOS 11.2 Cisco IOS 11.1
Not Vulnerable:	Cisco CatOS 4.5 (1)

Cisco Discovery Protocol Neighbor Announcment Denial of Service Vulnerability

Cisco Discovery Protocol (CDP) is a network neighbor discovery protocol distributed with implementations of the Cisco Internet Operating System.

CDP is implemented with some releases of the Cisco Internet Operating System. It is possible for a host on a local segment of network to cause a Cisco router to become unstable, and potentially stop routing traffic by generating large amounts of CDP traffic. This protocol can not be routed across routers to remote network segments.

This could lead to the ceasing of operation of Cisco routers, and a denial of service.

Cisco Discovery Protocol Neighbor Announcment Denial of Service Vulnerability

Phenoelit has provided exploit information which can be found at the following URL:

http://www.phenoelit.de/irpas/docu.html#cdp

Cisco Discovery Protocol Neighbor Announcment Denial of Service Vulnerability

Solution:
Vendor updates available:


Cisco IOS 11.1

• Cisco IOS 12.2(3.6)B
  

Cisco IOS 11.2

• Cisco IOS 12.2(4.1)S
  

Cisco IOS 12.1

• Cisco IOS 12.2(3.6)T
  

Cisco IOS 12.0(5.1)XP

• Cisco IOS 12.1(10.1)
  


• Cisco IOS 12.2(3.6)
  

Cisco IOS 11.3.11 b

• Cisco IOS 12.2(4.1)S
  

Cisco IOS 12.0.19

• Cisco IOS 12.2(3.6)PB
  

Cisco Discovery Protocol Neighbor Announcment Denial of Service Vulnerability

References: