Cisco IOS Data-Link Switching CVE-2011-1625 Remote Denial of Service Vulnerability

Bugtraq ID:	49286
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2011-1625
Remote:	Yes
Local:	No
Published:	Aug 23 2011 12:00AM
Updated:	Sep 26 2011 06:50PM
Credit:	Reported by the vendor.
Vulnerable:	Cisco Ios 15.1 Cisco Ios 15.0 Cisco IOS 12.4 Cisco IOS 12.3 Cisco IOS 12.2
Not Vulnerable:	Cisco IOS 12.2(50)SY Cisco Ios 12.2(33)SCF

Cisco IOS Data-Link Switching CVE-2011-1625 Remote Denial of Service Vulnerability

Cisco IOS is prone to a remote denial-of-service vulnerability.

Successfully exploiting this issue allows remote attackers to crash the affected device, denying service to legitimate users.

This issue is being tracked by Cisco Bug ID CSCtf74999.

Cisco IOS Data-Link Switching CVE-2011-1625 Remote Denial of Service Vulnerability

Attackers can use readily available network tools to exploit this issue.

Cisco IOS Data-Link Switching CVE-2011-1625 Remote Denial of Service Vulnerability

Solution:
Updates are available. Please see the references for details.

Cisco IOS Data-Link Switching CVE-2011-1625 Remote Denial of Service Vulnerability

References:

• Caveat List for Cisco IOS Release 12.2(33)SCF (Cisco)
  
• Cisco IOS Homepage (Cisco Systems)
  
• Release Notes for Cisco IOS Release 12.2(50)SY for Supervisor Engine 2T-10GE (Cisco)