Cisco IOS Malformed BGP Anonymous System Path Denial of Service Vulnerability

Bugtraq ID:	35862
Class:	Unknown
CVE:	CVE-2009-1168
Remote:	Yes
Local:	No
Published:	Jul 29 2009 12:00AM
Updated:	Jul 30 2009 05:04PM
Credit:	Reported by the vendor
Vulnerable:	Cisco IOS XE 2.3.1 t Cisco IOS XE 2.3.1 Cisco IOS XE 2.4 Cisco IOS 12.4T Cisco IOS 12.2XND Cisco IOS 12.2XNC Cisco IOS 12.2SXI Cisco IOS 12.0SY Cisco IOS 12.0S Cisco IOS 12.0(33)S3 Cisco IOS 12.0(32)SY8 Cisco IOS 12.0(32)SY Cisco IOS 12.0(32)S12
Not Vulnerable:	Cisco IOS XE 2.4.1 Cisco IOS XE 2.3.2 Cisco IOS 12.4(24)T2 Cisco IOS 12.4(24)T Cisco IOS 12.2(33)XND1 Cisco IOS 12.2(33)XNC2 Cisco IOS 12.2(33)SXI2 Cisco IOS 12.0(33)S5 Cisco IOS 12.0(32)SY9a Cisco IOS 12.0(32)SY7 Cisco IOS 12.0(32)SY10 Cisco IOS 12.0(32)S14

Cisco IOS Malformed BGP Anonymous System Path Denial of Service Vulnerability

Cisco IOS is prone to a remote denial-of-service vulnerability.

An attacker can exploit this issue to cause an affected device to reload, denying service to legitimate users.

This issue is being tracked by Cisco Bug ID CSCsy86021.

Cisco IOS Malformed BGP Anonymous System Path Denial of Service Vulnerability

To exploit this issue, attackers can use readily available network utilities.

Cisco IOS Malformed BGP Anonymous System Path Denial of Service Vulnerability

Solution:
The vendor has released updates. Please see the referenced advisory for details.

Cisco IOS Malformed BGP Anonymous System Path Denial of Service Vulnerability

References:

• Cisco Homepage (Cisco )
  
• Cisco Security Advisory: Cisco IOS Software Border Gateway Protocol 4-Byte Auton (Cisco Systems Product Security Incident Response Team )
  
• Cisco Security Advisory: Cisco IOS Software Border Gateway Protocol 4-Byte Auton (Cisco)