Cisco Nexus 5000 TCP Packet Remote Denial of Service Vulnerability

Bugtraq ID:	36303
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2009-0627
Remote:	Yes
Local:	No
Published:	Sep 08 2009 12:00AM
Updated:	Sep 08 2009 08:31PM
Credit:	Cisco
Vulnerable:	Cisco NX-OS 0 Cisco Nexus 5000 0
Not Vulnerable:	Cisco NX-OS 4.0(1a)N2(1)

Cisco Nexus 5000 TCP Packet Remote Denial of Service Vulnerability

Cisco Nexus 5000 is prone to a denial-of-service vulnerability when handling specially crafted TCP packets.

An attacker can exploit this issue to cause the device to crash, denying service to legitimate users.

Devices running versions prior to NX-OS 4.0(1a)N2(1) are vulnerable.

This issue is documented by Cisco Bug ID CSCsv08059.

Cisco Nexus 5000 TCP Packet Remote Denial of Service Vulnerability

Attackers can use readily available network utilities to exploit this issue.

Cisco Nexus 5000 TCP Packet Remote Denial of Service Vulnerability

Solution:
The vendor has released updates. Please see the referenced advisory for details.

Cisco Nexus 5000 TCP Packet Remote Denial of Service Vulnerability

References:

• Cisco Nexus 5000 Series Switches Homepage (Cisco)
  
• Cisco Security Advisory: TCP State Manipulation Denial of Service Vulnerabilitie (Cisco)