Cisco IOS Mobile IP/Mobile IPv6 Multiple Denial of Service Vulnerablities

Bugtraq ID:	34241
Class:	Unknown
CVE:	CVE-2009-0633 CVE-2009-0634
Remote:	Yes
Local:	No
Published:	Mar 25 2009 12:00AM
Updated:	Mar 25 2009 06:26PM
Credit:	Reported by the vendor
Vulnerable:	Cisco IOS 12.4XZ Cisco IOS 12.4XY Cisco IOS 12.4XW Cisco IOS 12.4XV Cisco IOS 12.4XT Cisco IOS 12.4XR Cisco IOS 12.4XQ Cisco IOS 12.4XP Cisco IOS 12.4XN Cisco IOS 12.4XM Cisco IOS 12.4XJ Cisco IOS 12.4XF Cisco IOS 12.4XE Cisco IOS 12.4XD Cisco IOS 12.4XC Cisco IOS 12.4XB Cisco IOS 12.4XA Cisco IOS 12.4(2)T Cisco IOS 12.4(19)MR Cisco IOS 12.4 Cisco IOS 12.3YX Cisco IOS 12.3YU Cisco IOS 12.3YT Cisco IOS 12.3YS Cisco IOS 12.3YQ Cisco IOS 12.3YM Cisco IOS 12.3YK Cisco IOS 12.3T
Not Vulnerable:	Cisco IOS 12.4(22)T1 Cisco IOS 12.4(19)MR2 Cisco IOS 12.4(18e) Cisco IOS 12.4(15)XZ2 Cisco IOS 12.4(15)XQ2 Cisco IOS 12.4(11)XW10

Cisco IOS Mobile IP/Mobile IPv6 Multiple Denial of Service Vulnerablities

Cisco IOS is prone to multiple remote denial-of-service vulnerabilities.

Successfully exploiting these issues allows remote attackers to crash the targeted device, denying service to legitimate users.

These issues are tracked by Cisco Bug IDs CSCsm97220 and CSCso05337.

Cisco IOS Mobile IP/Mobile IPv6 Multiple Denial of Service Vulnerablities

To exploit these issues, attackers use readily available utilities for generating network packets.

Cisco IOS Mobile IP/Mobile IPv6 Multiple Denial of Service Vulnerablities

Solution:
The vendor has released an advisory along with fixes. Please see the references for more information.

Cisco IOS Mobile IP/Mobile IPv6 Multiple Denial of Service Vulnerablities

References:

• Cisco IOS Software (Cisco Systems)
  
• Cisco Security Advisory: Cisco IOS Software Mobile IP and Mobile IPv6 Vulnerabil (Cisco)