Cisco IOS Fingerprinting ICMPv6 Echo Request Information Disclosure Vulnerability

Bugtraq ID:	50379
Class:	Design Error
CVE:	CVE-2011-2059
Remote:	Yes
Local:	No
Published:	Oct 26 2011 12:00AM
Updated:	Oct 26 2011 12:00AM
Credit:	Cisco
Vulnerable:	Cisco IOS 15.1S Cisco IOS 15.1MR Cisco IOS 15.1M Cisco IOS 15.1GC Cisco IOS 15.1EY Cisco IOS 15.1(4)XB5 Cisco IOS 15.1(4)M2 Cisco IOS 15.1(4)M1 Cisco IOS 15.1(3)T2 Cisco IOS 15.1(3)T1 Cisco IOS 15.1(3)T Cisco IOS 15.1(3)S Cisco IOS 15.1(2)T4 Cisco IOS 15.1(2)T3 Cisco IOS 15.1(2)T2a Cisco IOS 15.1(2)T2 Cisco Ios 15.1(2)T Cisco IOS 15.1(2)S2 Cisco IOS 15.1(2)S Cisco IOS 15.1(2)EY Cisco IOS 15.1(1)XB Cisco IOS 15.1(1)T4 Cisco IOS 15.1(1)T3 Cisco IOS 15.1(1)S1 Cisco Ios 15.1(1)S Cisco Ios 15.1 Cisco IOS 15.0SG Cisco IOS 15.0SE Cisco IOS 15.0SA Cisco IOS 15.0MRA Cisco IOS 15.0MR Cisco IOS 15.0M Cisco IOS 15.0M Cisco Ios 15.0(1)XA5 Cisco Ios 15.0(1)XA1 Cisco Ios 15.0(1)XA Cisco IOS 15.0(1)S4 Cisco IOS 15.0(1)S3a Cisco IOS 15.0(1)M7 Cisco IOS 15.0(1)M5a Cisco IOS 15.0(1)M5 Cisco IOS 15.0(1)M4 Cisco IOS 15.0(1)M2 Cisco IOS 15.0(1)M1 Cisco IOS 15.0(1)M1 Cisco IOS 15.0 M Cisco Ios 15.0
Not Vulnerable:	Cisco Ios 15.1(4)M1.3

Cisco IOS Fingerprinting ICMPv6 Echo Request Information Disclosure Vulnerability

Cisco IOS is prone to an information-disclosure vulnerability.

An attacker can exploit this issue to gain access to sensitive information about the presence of the IOS operating system. Information obtained may aid in further attacks.

This vulnerability is tracked by Cisco Bug ID CSCtq02219.

Cisco IOS Fingerprinting ICMPv6 Echo Request Information Disclosure Vulnerability

An attacker may exploit this issue using widely available tools.

Cisco IOS Fingerprinting ICMPv6 Echo Request Information Disclosure Vulnerability

Solution:
The vendor released an update. Please see the references for details.

Cisco IOS Fingerprinting ICMPv6 Echo Request Information Disclosure Vulnerability

References:

• 1999/tcp Redux �?? The IPv6 Flavor (Cisco)
  
• Cisco Homepage (Cisco)