Cisco Broadband Operating System TCP/IP Stack Denial of Service Vulnerability

Bugtraq ID:	4815
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	May 23 2002 12:00AM
Updated:	May 23 2002 12:00AM
Credit:	Reported by Knud Erik Højgaard from Cybercity, Denmark.
Vulnerable:	Cisco CBOS 2.4.4 Cisco CBOS 2.4.3 Cisco CBOS 2.4.2 b Cisco CBOS 2.4.2 ap Cisco CBOS 2.4.2 Cisco CBOS 2.4.1 Cisco CBOS 2.3.9 Cisco CBOS 2.3.8 Cisco CBOS 2.3.7 .002 Cisco CBOS 2.3.7 Cisco CBOS 2.3.5 .015 Cisco CBOS 2.3.5 Cisco CBOS 2.3.2 Cisco CBOS 2.3 .053 Cisco CBOS 2.3 Cisco CBOS 2.2.1 a Cisco CBOS 2.2.1 Cisco CBOS 2.2 Cisco CBOS 2.1 a Cisco CBOS 2.1 Cisco CBOS 2.0.1
Not Vulnerable:	Cisco CBOS 2.4.5

Cisco Broadband Operating System TCP/IP Stack Denial of Service Vulnerability

Cisco Broadband Operating System (CBOS) is the operating system used on Cisco 600 series routers.

When the CBOS TCP/IP stack is forced to process a high number of unusually large packets, it will consume all memory. This will cause the router to freeze and stop forwarding packets.

The following devices in the Cisco 600 series of routers are affected:
605, 626, 627, 633, 673, 675, 675e, 676, 677, 677i and 678.

This vulnerability has been assigned Cisco Bug ID CSCdx36121.

Cisco Broadband Operating System TCP/IP Stack Denial of Service Vulnerability

References:

• Cisco Call Manager Express (Cisco Systems)