Cisco IOS IP Service Level Agreement Remote Denial of Service Vulnerability

Bugtraq ID:	49823
Class:	Unknown
CVE:	CVE-2011-3272
Remote:	Yes
Local:	No
Published:	Sep 28 2011 12:00AM
Updated:	Sep 28 2011 12:00AM
Credit:	Cisco
Vulnerable:	Cisco IOS XE 3.4 Cisco IOS XE 3.3 Cisco IOS XE 3.2 Cisco IOS XE 3.1 Cisco IOS XE 2.6 Cisco IOS XE 2.5 Cisco IOS XE 2.4 Cisco IOS XE 2.3 Cisco IOS XE 2.2 Cisco IOS XE 2.1 Cisco IOS 15.1S Cisco IOS 15.1MR Cisco IOS 15.1M Cisco IOS 15.1GC Cisco IOS 15.1EY
Not Vulnerable:	Cisco IOS 15.1(3)T2 Cisco IOS 15.1(3)S Cisco IOS 15.1(2)T4 Cisco IOS 15.1(2)S2 Cisco IOS 15.1(1)T3

Cisco IOS IP Service Level Agreement Remote Denial of Service Vulnerability

Cisco IOS is prone to a remote denial-of-service vulnerability.

An attacker can exploit this issue to cause the affected devices to reload, denying service to legitimate users. Repeat attacks will result in denial-of-service condition.

This issue is tracked by Cisco Bug ID CSCtk67073.

Cisco IOS IP Service Level Agreement Remote Denial of Service Vulnerability

To exploit this issue, attackers can use readily available network utilities.

Cisco IOS IP Service Level Agreement Remote Denial of Service Vulnerability

Solution:
The vendor has released an advisory along with fixes. Please see the references for more information.

Cisco IOS IP Service Level Agreement Remote Denial of Service Vulnerability

References:

• Cisco IOS Software (Cisco Systems)
  
• Cisco Security Advisory: Cisco IOS Software IP Service Level Agreement Vulnerabi (Cisco)