RETIRED: Cisco IOS SNMP Message Processing Remote Denial of Service Vulnerability

Bugtraq ID:	47719
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	May 04 2011 12:00AM
Updated:	Jun 20 2011 06:30PM
Credit:	The penetration test team Of NCNIPC
Vulnerable:	Cisco IOS 15.0M Cisco IOS 15.0M Cisco Ios 15.0(1)XA5 Cisco Ios 15.0(1)XA1 Cisco Ios 15.0(1)XA Cisco IOS 15.0(1)M2 Cisco IOS 15.0(1)M1 Cisco IOS 15.0(1)M1 Cisco IOS 15.0 M Cisco Ios 15.0
Not Vulnerable:

RETIRED: Cisco IOS SNMP Message Processing Remote Denial of Service Vulnerability

Cisco IOS is prone to a remote denial-of-service vulnerability.

Successfully exploiting this issue allows remote attackers to consume excessive CPU resources, potentially denying service to legitimate users.

This BID is being retired. The vendor has determined that administrators following recommended best practices are not affected by this issue.

RETIRED: Cisco IOS SNMP Message Processing Remote Denial of Service Vulnerability

Attackers can use readily available network tools to exploit this issue.

RETIRED: Cisco IOS SNMP Message Processing Remote Denial of Service Vulnerability

Solution:
UPDATE (May 5, 2011): The vendor is investigating this issue, and currently is unable to confirm the existence of a vulnerability. Please see the referenced vendor advisory for more information.

UPDATE (June 20, 2011): The vendor has determined that administrators following recommended best practices are not affected by this issue. Please see the referenced vendor advisory for more information.

RETIRED: Cisco IOS SNMP Message Processing Remote Denial of Service Vulnerability

References:

• Cisco IOS Homepage (Cisco Systems)
  
• Cisco IOS SNMP Message Processing Denial Of Service Vulnerability ([email protected])
  
• Cisco Security Response: Cisco IOS Software Denial of Service Vulnerabilities (Cisco Systems Product Security Incident Response Team )
  
• Cisco Security Response: Cisco IOS Software Denial of Service Vulnerabilities (Cisco)