Cisco IOS Multiple Features TCP Packet Denial of Service Vulnerability

Bugtraq ID:	34238
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2009-0629
Remote:	Yes
Local:	No
Published:	Mar 25 2009 12:00AM
Updated:	Mar 25 2009 07:36PM
Credit:	The vendor disclosed this vulnerability.
Vulnerable:	Cisco IOS 12.4YA Cisco IOS 12.4XZ Cisco IOS 12.4XY Cisco IOS 12.4XR Cisco IOS 12.4XQ Cisco IOS 12.4T Cisco IOS 12.4MR Cisco IOS 12.4MD Cisco IOS 12.4(19)MR Cisco IOS 12.4(15)MD1 Cisco IOS 12.4(15)MD Cisco IOS 12.2ZYA Cisco IOS 12.2ZY Cisco IOS 12.2ZX Cisco IOS 12.2ZU Cisco IOS 12.2XO Cisco IOS 12.2XNB Cisco IOS 12.2XNA Cisco IOS 12.2XN Cisco IOS 12.2SZ Cisco IOS 12.2SXI Cisco IOS 12.2SXH Cisco IOS 12.2SXF Cisco IOS 12.2SXE Cisco IOS 12.2SXD Cisco IOS 12.2SW Cisco IOS 12.2SVE Cisco IOS 12.2SVD Cisco IOS 12.2SVC Cisco IOS 12.2SVA Cisco IOS 12.2SV Cisco IOS 12.2STE Cisco IOS 12.2SRD Cisco IOS 12.2SRC Cisco IOS 12.2SRB Cisco IOS 12.2SRA Cisco IOS 12.2SO Cisco IOS 12.2SM Cisco IOS 12.2SGA Cisco IOS 12.2SG Cisco IOS 12.2SEG Cisco IOS 12.2SEE Cisco IOS 12.2SED Cisco IOS 12.2SEC Cisco IOS 12.2SEB Cisco IOS 12.2SEA Cisco IOS 12.2SE Cisco IOS 12.2SCB Cisco IOS 12.2SCA Cisco IOS 12.2SBC Cisco IOS 12.2SB Cisco IOS 12.2S Cisco IOS 12.2IXG Cisco IOS 12.2IXF Cisco IOS 12.2IXE Cisco IOS 12.2IXD Cisco IOS 12.2IXC Cisco IOS 12.2IXB Cisco IOS 12.2IXA Cisco IOS 12.2IRB Cisco IOS 12.2IRA Cisco IOS 12.2FZ Cisco IOS 12.2EZ Cisco IOS 12.2EY Cisco IOS 12.2EX Cisco IOS 12.2EWA Cisco IOS 12.2EW Cisco IOS 12.2(25)SEG3 Cisco IOS 12.2(25)SEG2
Not Vulnerable:	Cisco IOS 12.4(22)T1 Cisco IOS 12.4(22)T Cisco IOS 12.4(20)YA3 Cisco IOS 12.4(20)YA2 Cisco IOS 12.4(20)T2 Cisco IOS 12.4(20)T Cisco IOS 12.4(19)MR2 Cisco IOS 12.4(19)MR1 Cisco IOS 12.4(15)XZ2 Cisco IOS 12.4(15)XY4 Cisco IOS 12.4(15)XR4 Cisco IOS 12.4(15)XQ2 Cisco IOS 12.4(15)T9 Cisco IOS 12.4(15)MD2 Cisco IOS 12.4(11)MD7 Cisco IOS 12.2IXH Cisco IOS 12.2(52)SG Cisco IOS 12.2(50)SG Cisco IOS 12.2(50)SE Cisco IOS 12.2(46)XO Cisco IOS 12.2(46)SE2 Cisco IOS 12.2(44)SE6 Cisco IOS 12.2(44)SE5 Cisco IOS 12.2(44)EY Cisco IOS 12.2(33)SXI1 Cisco IOS 12.2(33)SXH5 Cisco IOS 12.2(33)SRD1 Cisco IOS 12.2(33)SRC4 Cisco IOS 12.2(33)SRC3 Cisco IOS 12.2(33)SRB5a Cisco IOS 12.2(33)SCB1 Cisco IOS 12.2(33)SB4 Cisco IOS 12.2(33)SB3 Cisco IOS 12.2(31)SGA9 Cisco IOS 12.2(31)SB14 Cisco IOS 12.2(28)SB13 Cisco IOS 12.2(25)SEG6 Cisco IOS 12.2(25)SEG4 Cisco IOS 12.2(18)ZYA1 Cisco IOS 12.2(18)SXF16 Cisco IOS 12.2(18)IXH

Cisco IOS Multiple Features TCP Packet Denial of Service Vulnerability

Multiple features of Cisco IOS (Internetwork Operating System) are prone to a denial-of-service vulnerability when handling specially crafted TCP packets.

An attacker can exploit this issue to trigger an affected device to reload, causing denial-of-service conditions.

This issue is documented by Cisco Bug ID CSCsr29468.

The following features are affected:

Airline Product Set (ALPS)
Serial Tunnel Code (STUN) and Block Serial Tunnel Code (BSTUN)
Native Client Interface Architecture support (NCIA)
Data-link switching (DLSw)
Remote Source-Route Bridging (RSRB)
Point to Point Tunneling Protocol (PPTP)
X.25 for Record Boundary Preservation (RBP)
X.25 over TCP (XOT)
X.25 Routing

Cisco IOS Multiple Features TCP Packet Denial of Service Vulnerability

Attackers can use readily available network utilities to exploit this issue.

Cisco IOS Multiple Features TCP Packet Denial of Service Vulnerability

Solution:
The vendor has released updates. Please see the referenced advisory for details.

Cisco IOS Multiple Features TCP Packet Denial of Service Vulnerability

References:

• Cisco Homepage (Cisco )
  
• Cisco Security Advisory: Cisco IOS Software Multiple Features Crafted TCP Sequen (Cisco Systems Product Security Incident Response Team )
  
• Cisco Applied Mitigation Bulletin: Identifying and Mitigating Exploitation of th (Cisco)
  
• cisco-sa-20090325-tcp Cisco Security Advisory: Cisco IOS Software Multiple Featu (Cisco)