Cisco SSH Denial of Service Vulnerability
BID:5114
Info
Cisco SSH Denial of Service Vulnerability
| Bugtraq ID: | 5114 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 27 2002 12:00AM |
| Updated: | Jun 27 2002 12:00AM |
| Credit: | Credited to Cisco Systems. |
| Vulnerable: |
Cisco PIX Firewall 6.2 Cisco PIX Firewall 6.1 Cisco PIX Firewall 6.0 Cisco PIX Firewall 5.3 Cisco PIX Firewall 5.2 Cisco IOS 12.2YH Cisco IOS 12.2YG Cisco IOS 12.2YF Cisco IOS 12.2YD Cisco IOS 12.2YC Cisco IOS 12.2YB Cisco IOS 12.2YA Cisco IOS 12.2XW Cisco IOS 12.2XT Cisco IOS 12.2XS Cisco IOS 12.2XR Cisco IOS 12.2XQ Cisco IOS 12.2XN Cisco IOS 12.2XM Cisco IOS 12.2XL Cisco IOS 12.2XK Cisco IOS 12.2XJ Cisco IOS 12.2XI Cisco IOS 12.2XH Cisco IOS 12.2XG Cisco IOS 12.2XF Cisco IOS 12.2XE Cisco IOS 12.2XD Cisco IOS 12.2XB Cisco IOS 12.2XA Cisco IOS 12.2T Cisco IOS 12.2S Cisco IOS 12.2DD Cisco IOS 12.2DA Cisco IOS 12.2BC Cisco IOS 12.2B Cisco IOS 12.2 Cisco IOS 12.1YI Cisco IOS 12.1YF Cisco IOS 12.1YE Cisco IOS 12.1YD Cisco IOS 12.1YC Cisco IOS 12.1YB Cisco IOS 12.1XU Cisco IOS 12.1XT Cisco IOS 12.1XQ Cisco IOS 12.1XP Cisco IOS 12.1XM Cisco IOS 12.1XL Cisco IOS 12.1XJ Cisco IOS 12.1XI Cisco IOS 12.1XH Cisco IOS 12.1XG Cisco IOS 12.1XF Cisco IOS 12.1XC Cisco IOS 12.1XB Cisco IOS 12.1T Cisco IOS 12.1EC Cisco IOS 12.1E Cisco IOS 12.1(9)EX Cisco IOS 12.1(8a)EX Cisco IOS 12.1(5c)EX Cisco IOS 12.1(1)EX Cisco IOS 12.0XV Cisco IOS 12.0XM Cisco IOS 12.0XB Cisco IOS 12.0ST Cisco IOS 12.0SP Cisco IOS 12.0S Cisco CSS11000 Content Services Switch Cisco Catalyst 6000 7.1 (2) Cisco Catalyst 6000 7.1 Cisco Catalyst 6000 6.3 (4) Cisco Catalyst 6000 6.3 (0.7)PAN Cisco Catalyst 6000 6.2 (0.111) Cisco Catalyst 6000 6.2 (0.110) Cisco Catalyst 6000 6.1 (2.13) Cisco Catalyst 6000 6.1 (1c) Cisco Catalyst 6000 6.1 (1b) Cisco Catalyst 6000 6.1 (1a) Cisco Catalyst 6000 6.1 (1) Cisco Catalyst 6000 5.5 (4b) Cisco Catalyst 6000 5.5 (4a) Cisco Catalyst 6000 5.5 (4) Cisco Catalyst 6000 5.5 (3) Cisco Catalyst 6000 5.5 (2) Cisco Catalyst 6000 5.5 (13) Cisco Catalyst 6000 5.5 (1) Cisco Catalyst 6000 5.5 Cisco Catalyst 6000 5.4.1 Cisco Catalyst 6000 5.4 (4) Cisco Catalyst 6000 5.4 (3) Cisco Catalyst 6000 5.4 (2) Cisco Catalyst 6000 5.4 (1) Cisco Catalyst 6000 5.4 Cisco Catalyst 6000 5.3 (6)CSX Cisco Catalyst 6000 5.3 (5a)CSX Cisco Catalyst 6000 5.3 (5)CSX Cisco Catalyst 6000 5.3 (4)CSX Cisco Catalyst 6000 5.3 (3)CSX Cisco Catalyst 6000 5.3 (2)CSX Cisco Catalyst 6000 5.3 (1a)CSX Cisco Catalyst 6000 5.3 (1)CSX |
| Not Vulnerable: | |
Discussion
Cisco SSH Denial of Service Vulnerability
While addressing vulnerabilities described in http://www.cisco.com/warp/public/707/SSH-multiple-pub.html, a denial of service condition has been inadvertently introduced into firmware upgrades. Firmware for routers and switches (IOS), Catalyst 6000 switches running CatOS, Cisco PIX Firewall and Cisco 11000 Content Service Switch devices may be vulnerable.
Cisco has reported that scanning for SSH vulnerabilities on affected devices will cause excessive CPU consumption. The condition is due to a failure of the Cisco SSH implementation to properly process large SSH packets.
Repeated and concurrent attacks may result in a denial of device service. As many of these devices are critical infrastructure components, more serious network outages may occur.
Cisco has released upgrades that will eliminate this vulnerability.
While addressing vulnerabilities described in http://www.cisco.com/warp/public/707/SSH-multiple-pub.html, a denial of service condition has been inadvertently introduced into firmware upgrades. Firmware for routers and switches (IOS), Catalyst 6000 switches running CatOS, Cisco PIX Firewall and Cisco 11000 Content Service Switch devices may be vulnerable.
Cisco has reported that scanning for SSH vulnerabilities on affected devices will cause excessive CPU consumption. The condition is due to a failure of the Cisco SSH implementation to properly process large SSH packets.
Repeated and concurrent attacks may result in a denial of device service. As many of these devices are critical infrastructure components, more serious network outages may occur.
Cisco has released upgrades that will eliminate this vulnerability.
Exploit / POC
Cisco SSH Denial of Service Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
Cisco SSH Denial of Service Vulnerability
Solution:
Cisco has released upgraded versions of PIX and IOS firmware that eliminates this vulnerability. The upgrades are listed at:
http://www.cisco.com/warp/public/707/SSH-scanning.shtml#Software
Solution:
Cisco has released upgraded versions of PIX and IOS firmware that eliminates this vulnerability. The upgrades are listed at:
http://www.cisco.com/warp/public/707/SSH-scanning.shtml#Software
References
Cisco SSH Denial of Service Vulnerability
References:
References:
- Security Advisory: Scanning for SSH Can Cause a Crash (Cisco Systems)