Cisco Nexus 1000V VEM Denial of Service Vulnerability
BID:46247
Info
Cisco Nexus 1000V VEM Denial of Service Vulnerability
| Bugtraq ID: | 46247 |
| Class: | Access Validation Error |
| CVE: |
CVE-2011-0355 |
| Remote: | Yes |
| Local: | No |
| Published: | Feb 07 2011 12:00AM |
| Updated: | Feb 07 2011 12:00AM |
| Credit: | The vendor reported this issue. |
| Vulnerable: |
VMWare ESXi 4.1 VMWare ESXi 4.0 VMWare ESX 4.1 VMWare ESX 4.0 Cisco Nexus 1000V Virtual Ethernet Module 4.0(4) SV1(3b) Cisco Nexus 1000V Virtual Ethernet Module 4.0(4) SV1(3a) Cisco Nexus 1000V Virtual Ethernet Module 4.0(4) SV1(3) Cisco Nexus 1000V Virtual Ethernet Module 4.0(4) SV1(2) Cisco Nexus 1000V Virtual Ethernet Module 4.0(4) SV1(1) |
| Not Vulnerable: |
Cisco Nexus 1000V Virtual Ethernet Module 4.2(1) SV1(4) Cisco Nexus 1000V Virtual Ethernet Module 4.0(4) SV1(3c) |
Discussion
Cisco Nexus 1000V VEM Denial of Service Vulnerability
The Cisco Nexus 1000V VEM is prone to a denial-of-service vulnerability.
An attacker can exploit this issue to cause the affected application to crash, resulting in a denial-of-service condition.
The following Cisco products are vulnerable:
Cisco Nexus 1000V Virtual Ethernet Module Release 4.0(4) SV1(3b)
Cisco Nexus 1000V Virtual Ethernet Module Release 4.0(4) SV1(3a)
Cisco Nexus 1000V Virtual Ethernet Module Release 4.0(4) SV1(3)
Cisco Nexus 1000V Virtual Ethernet Module Release 4.0(4) SV1(2)
Cisco Nexus 1000V Virtual Ethernet Module Release 4.0(4) SV1(1)
The following VMware products are vulnerable:
ESXi 4.1
ESXi 4.0
ESX 4.1
ESX 4.0
The Cisco Nexus 1000V VEM is prone to a denial-of-service vulnerability.
An attacker can exploit this issue to cause the affected application to crash, resulting in a denial-of-service condition.
The following Cisco products are vulnerable:
Cisco Nexus 1000V Virtual Ethernet Module Release 4.0(4) SV1(3b)
Cisco Nexus 1000V Virtual Ethernet Module Release 4.0(4) SV1(3a)
Cisco Nexus 1000V Virtual Ethernet Module Release 4.0(4) SV1(3)
Cisco Nexus 1000V Virtual Ethernet Module Release 4.0(4) SV1(2)
Cisco Nexus 1000V Virtual Ethernet Module Release 4.0(4) SV1(1)
The following VMware products are vulnerable:
ESXi 4.1
ESXi 4.0
ESX 4.1
ESX 4.0
Exploit / POC
Cisco Nexus 1000V VEM Denial of Service Vulnerability
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Cisco Nexus 1000V VEM Denial of Service Vulnerability
Solution:
Vendor updates are available. Please see the references for more information.
Solution:
Vendor updates are available. Please see the references for more information.
References
Cisco Nexus 1000V VEM Denial of Service Vulnerability
References:
References: