Cisco Local Interface ARP Denial of Service Vulnerability

BID:3547

Info

Cisco Local Interface ARP Denial of Service Vulnerability

Bugtraq ID: 3547
Class: Design Error
CVE:
Remote: Yes
Local: No
Published: Nov 15 2001 12:00AM
Updated: Nov 15 2001 12:00AM
Credit: This vulnerability was announced in a Cisco Security Advisory on November 15, 2001.
Vulnerable: Cisco IOS 12.2XQ
Cisco IOS 12.2XK
Cisco IOS 12.2XJ
Cisco IOS 12.2XI
Cisco IOS 12.2XH
Cisco IOS 12.2XG
Cisco IOS 12.2XE
Cisco IOS 12.2XD
Cisco IOS 12.2XC
Cisco IOS 12.2XB
Cisco IOS 12.2XA
Cisco IOS 12.2T
Cisco IOS 12.2DD
Cisco IOS 12.2
Cisco IOS 12.1YH
Cisco IOS 12.1YF
Cisco IOS 12.1YE
Cisco IOS 12.1YD
Cisco IOS 12.1YC
Cisco IOS 12.1YB
Cisco IOS 12.1YA
Cisco IOS 12.1XX
Cisco IOS 12.1XW
Cisco IOS 12.1XV
Cisco IOS 12.1XU
Cisco IOS 12.1XT
Cisco IOS 12.1XS
Cisco IOS 12.1XR
Cisco IOS 12.1XQ
Cisco IOS 12.1XP
Cisco IOS 12.1XM
Cisco IOS 12.1XL
Cisco IOS 12.1XK
Cisco IOS 12.1XJ
Cisco IOS 12.1XI
Cisco IOS 12.1XH
Cisco IOS 12.1XG
Cisco IOS 12.1XF
Cisco IOS 12.1XE
Cisco IOS 12.1XD
Cisco IOS 12.1XC
Cisco IOS 12.1XB
Cisco IOS 12.1XA
Cisco IOS 12.1T
Cisco IOS 12.1EZ
Cisco IOS 12.1EY
Cisco IOS 12.1EX
Cisco IOS 12.1EC
Cisco IOS 12.1EA
Cisco IOS 12.1E
Cisco IOS 12.1DC
Cisco IOS 12.1DB
Cisco IOS 12.1DA
Cisco IOS 12.1AA
Cisco IOS 12.1
Cisco IOS 12.0XV
Cisco IOS 12.0XU
Cisco IOS 12.0XS
Cisco IOS 12.0XR
Cisco IOS 12.0XQ
Cisco IOS 12.0XP
Cisco IOS 12.0XN
Cisco IOS 12.0XM
Cisco IOS 12.0XL
Cisco IOS 12.0XK
Cisco IOS 12.0XJ
Cisco IOS 12.0XI
Cisco IOS 12.0XH
Cisco IOS 12.0XG
Cisco IOS 12.0XF
Cisco IOS 12.0XE
Cisco IOS 12.0XD
Cisco IOS 12.0XC
Cisco IOS 12.0XB
Cisco IOS 12.0XA
Cisco IOS 12.0WT
Cisco IOS 12.0WC
Cisco IOS 12.0W5
Cisco IOS 12.0ST
Cisco IOS 12.0SL
Cisco IOS 12.0SC
Cisco IOS 12.0S
Cisco IOS 12.0DC
Cisco IOS 12.0DB
Cisco IOS 12.0DA
Cisco IOS 12.0
Cisco IOS 11.3T
Cisco IOS 11.3
Cisco IOS 11.2P
Cisco IOS 11.2
Cisco IOS 11.1
Not Vulnerable:

Discussion

Cisco Local Interface ARP Denial of Service Vulnerability

IOS is the Internetwork Operating System, distributed by Cisco Systems.

A problem in the operating system has been discovered that could lead to a user on a system local to the router denying service all network users. The problem is in the handling of multiple ARP requests. When multiple ARP requests are received by the router, it makes an entry for it's own MAC address as the received address. It discontinues all other ARP entries afterwards.

This makes it possible for a user on a network local to the router to deny service to users on all sides of the router.

This vulnerability affects the following Cisco systems:

Cisco routers in the AGS/MGS/CGS/AGS+, IGS, RSM, 800, ubr900, 1000, 1400, 1500, 1600, 1700, 2500, 2600, 3000, 3600, 3800, 4000, 4500, 4700, AS5200, AS5300, AS5800, 6400, 7000, 7200, ubr7200, 7500, and 12000 series.

Most recent versions of the LS1010 ATM switch.

The Catalyst 6000.

The Catalyst 2900XL LAN switch.

The Catalyst 1900, 2800, 2900, 3000, and 5000 series LAN switches are affected.

The Cisco DistributedDirector.

Solution / Fix

Cisco Local Interface ARP Denial of Service Vulnerability

Solution:
Vendor fixes available:


Cisco IOS 12.1XR
  • Cisco IOS 12.2(7)T


Cisco IOS 12.2XJ
  • Cisco IOS 12.2(2)XJ2


Cisco IOS 12.2XB
  • Cisco IOS 12.2(2)XB2


Cisco IOS 12.2XC
  • Cisco IOS 12.2(2)XC1


Cisco IOS 12.0SC
  • Cisco IOS 12.1EC


Cisco IOS 12.0XA
  • Cisco IOS 12.1(11)


Cisco IOS 12.0XI
  • Cisco IOS 12.1(11)


Cisco IOS 12.1XD
  • Cisco IOS 12.2


Cisco IOS 12.2DD
  • Cisco IOS 12.2(2)DD1


Cisco IOS 12.1XJ
  • Cisco IOS 12.2


Cisco IOS 12.1EX
  • Cisco IOS 12.1(11)E


Cisco IOS 12.1XI
  • Cisco IOS 12.2


Cisco IOS 12.1XS
  • Cisco IOS 12.2(2)XC1


Cisco IOS 12.0XC
  • Cisco IOS 12.1(11)


Cisco IOS 12.2T
  • Cisco IOS 12.2(7)T


Cisco IOS 12.0W5
  • Cisco IOS 12.0(16)W5(21b)

  • Cisco IOS 12.0(20)W5(24)


Cisco IOS 12.0XB
  • Cisco IOS 12.1(11)


Cisco IOS 12.1T
  • Cisco IOS 12.2


Cisco IOS 12.1XA
  • Cisco IOS 12.2


Cisco IOS 12.1XK
  • Cisco IOS 12.2


Cisco IOS 12.0XG
  • Cisco IOS 12.1(11)


Cisco IOS 12.1XW
  • Cisco IOS 12.1(11)


Cisco IOS 12.0ST
  • Cisco IOS 12.0(20)ST


Cisco IOS 12.1YD
  • Cisco IOS 12.2(7)T


Cisco IOS 12.2XG
  • Cisco IOS 12.2(2)XG1


Cisco IOS 12.0XS
  • Cisco IOS 12.1(11)E


Cisco IOS 12.1XX
  • Cisco IOS 12.1(11)


Cisco IOS 12.0XV
  • Cisco IOS 12.2


Cisco IOS 12.1XB
  • Cisco IOS 12.2


Cisco IOS 12.1
  • Cisco IOS 12.1(11)


Cisco IOS 12.1XM
  • Cisco IOS 12.1(5)XM6


Cisco IOS 12.0XK
  • Cisco IOS 12.1(11)


Cisco IOS 12.0XR
  • Cisco IOS 12.1(11)


Cisco IOS 12.1YF
  • Cisco IOS 12.1(5)YF3


Cisco IOS 12.2XI
  • Cisco IOS 12.2(2)XI1


Cisco IOS 12.1XC
  • Cisco IOS 12.2


Cisco IOS 12.2
  • Cisco IOS 12.2(5)


Cisco IOS 12.1DA
  • Cisco IOS 12.2.T

  • Cisco IOS 12.2DA


Cisco IOS 12.0XE
  • Cisco IOS 12.1(11)E

  • Cisco IOS 12.2


Cisco IOS 12.2XH
  • Cisco IOS 12.2(2)XH2


Cisco IOS 12.1XL
  • Cisco IOS 12.2


Cisco IOS 12.1XT
  • Cisco IOS 12.2(7)T


Cisco IOS 12.1YE
  • Cisco IOS 12.1(5)YE4


Cisco IOS 12.1EC
  • Cisco IOS 12.1(9)EC


Cisco IOS 12.0
  • Cisco IOS 12.0(20)


Cisco IOS 12.1XE
  • Cisco IOS 12.2


Cisco IOS 12.1YC
  • Cisco IOS 12.1(5)YC2


Cisco IOS 12.1EA
  • Cisco IOS 12.1(6)EA1a

  • Cisco IOS 12.1(6)EA2


Cisco IOS 12.1E
  • Cisco IOS 12.1(11)E


Cisco IOS 12.1DC
  • Cisco IOS 12.2(2)B


Cisco IOS 12.0XM
  • Cisco IOS 12.1(11)


Cisco IOS 12.0S
  • Cisco IOS 12.0(21)S


Cisco IOS 12.2XA
  • Cisco IOS 12.2(2)XA4


Cisco IOS 12.0XN
  • Cisco IOS 12.1(11)


Cisco IOS 12.0XH
  • Cisco IOS 12.1(11)


Cisco IOS 12.0DA
  • Cisco IOS 12.2DA


Cisco IOS 12.1YB
  • Cisco IOS 12.1(5)YB5


Cisco IOS 12.1DB
  • Cisco IOS 12.1T

  • Cisco IOS 12.2(2)B


Cisco IOS 12.0XQ
  • Cisco IOS 12.1(11)


Cisco IOS 12.1EZ
  • Cisco IOS 12.1(6)EZ4


Cisco IOS 12.0WC
  • Cisco IOS 12.0(5)WC3


Cisco IOS 12.1XG
  • Cisco IOS 12.2


Cisco IOS 12.2XQ
  • Cisco IOS 12.2(2)XQ2


Cisco IOS 12.2XK
  • Cisco IOS 12.2(2)XK5


Cisco IOS 12.0XF
  • Cisco IOS 12.1(11)


Cisco IOS 12.0XL
  • Cisco IOS 12.1(11)


Cisco IOS 12.0XJ
  • Cisco IOS 12.1(11)


Cisco IOS 12.0XD
  • Cisco IOS 12.1(11)


Cisco IOS 12.1XF
  • Cisco IOS 12.2


Cisco IOS 12.1XH
  • Cisco IOS 12.2

© CVE.report 2026

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

Free CVE JSON API cve.report/api

CVE.report and Source URL Uptime Status status.cve.report