Cisco IOS Zone-Based Policy Firewall SIP Inspection Denial of Service Vulnerability

Bugtraq ID:	36492
Class:	Design Error
CVE:	CVE-2009-2867
Remote:	Yes
Local:	No
Published:	Sep 23 2009 12:00AM
Updated:	Sep 23 2009 07:20PM
Credit:	Cisco
Vulnerable:	Cisco IOS 12.4YB Cisco IOS 12.4YA Cisco IOS 12.4XZ Cisco IOS 12.4T
Not Vulnerable:	Cisco IOS 12.4(24)T Cisco IOS 12.4(22)T1 Cisco IOS 12.4(20)T2

Cisco IOS Zone-Based Policy Firewall SIP Inspection Denial of Service Vulnerability

Cisco IOS is prone to a remote denial-of-service vulnerability.

An attacker can exploit this issue to cause an affected device to reload, denying service to legitimate users.

This issue is being tracked by Cisco Bug ID CSCsr18691.

Cisco IOS Zone-Based Policy Firewall SIP Inspection Denial of Service Vulnerability

To exploit this issue, attackers can use readily available network utilities.

Cisco IOS Zone-Based Policy Firewall SIP Inspection Denial of Service Vulnerability

Solution:
Updates are available. Please see the references for details.

Cisco IOS Zone-Based Policy Firewall SIP Inspection Denial of Service Vulnerability

References:

• Cisco Homepage (Cisco )
  
• Cisco Security Advisory: Cisco IOS Software Zone-Based Policy Firewall Vulnerabi (Cisco)