Cisco CBOS Oversized Packet DHCP Denial Of Service Vulnerability

Bugtraq ID:	4813
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2002-0886
Remote:	Yes
Local:	No
Published:	May 23 2002 12:00AM
Updated:	Jul 11 2009 12:46PM
Credit:	Discovery of this issue is credited to Knud Erik Højgaard from Cybercity, Denmark.
Vulnerable:	Cisco CBOS 2.4.4 Cisco CBOS 2.4.3 Cisco CBOS 2.4.2 b Cisco CBOS 2.4.2 ap Cisco CBOS 2.4.2 Cisco CBOS 2.4.1 Cisco CBOS 2.3.9 Cisco CBOS 2.3.8 Cisco CBOS 2.3.7 .002 Cisco CBOS 2.3.7 Cisco CBOS 2.3.5 .015 Cisco CBOS 2.3.5 Cisco CBOS 2.3.2 Cisco CBOS 2.3 .053 Cisco CBOS 2.3 Cisco CBOS 2.2.1 a Cisco CBOS 2.2.1 Cisco CBOS 2.2 Cisco CBOS 2.1 a Cisco CBOS 2.1 Cisco CBOS 2.0.1
Not Vulnerable:	Cisco CBOS 2.4.5

Cisco CBOS Oversized Packet DHCP Denial Of Service Vulnerability

CBOS (Cisco Broadband Operating System) is the operating system for Cisco 600 series routers.

It is possible to cause the CPE (Customer Premises Equipment) to freeze by sending a large packet to the DHCP port.

The following devices in the Cisco 600 series of routers are affected:
605, 626, 627, 633, 673, 675, 675e, 676, 677, 677i and 678.

This vulnerability has been assigned Cisco Bug ID CSCdw90020.

Cisco CBOS Oversized Packet DHCP Denial Of Service Vulnerability

References:

• Cisco Call Manager Express (Cisco Systems)