Cisco IOS NAT Functionality SIP Denial of Service Vulnerability

Bugtraq ID:	52758
Class:	Unknown
CVE:	CVE-2012-0383
Remote:	Yes
Local:	No
Published:	Mar 28 2012 12:00AM
Updated:	Mar 28 2012 12:00AM
Credit:	Cisco
Vulnerable:	Cisco IOS 15.1(3)T Cisco IOS 15.1(2)T4 Cisco Ios 15.1(2)T Cisco IOS 15.0M Cisco IOS 15.0(1)M5 Cisco IOS 15.0(1)M4 Cisco IOS 12.4T Cisco IOS 12.4MDB Cisco IOS 12.4MDA Cisco IOS 12.4MD
Not Vulnerable:	Cisco IOS 15.1S Cisco IOS 15.1MR Cisco IOS 15.1M Cisco IOS 15.1GC Cisco IOS 15.1EY Cisco Ios 15.1(3)T3 Cisco Ios 15.0XO Cisco Ios 15.0XA Cisco Ios 15.0SY Cisco IOS 15.0SE Cisco IOS 15.0SA Cisco IOS 15.0MRA Cisco IOS 15.0MR

Cisco IOS NAT Functionality SIP Denial of Service Vulnerability

Cisco IOS is prone to a remote denial-of-service vulnerability.

Successful exploits may allow an attacker to cause an affected device to consume excessive amounts of memory, resulting in a denial-of-service condition.

This issue is being tracked by Cisco Bug ID CSCti35326.

Cisco IOS NAT Functionality SIP Denial of Service Vulnerability

To exploit this issue, attackers can use readily available network utilities.

Cisco IOS NAT Functionality SIP Denial of Service Vulnerability

Solution:
The vendor has released updates. Please see the referenced advisory for more information.

Cisco IOS NAT Functionality SIP Denial of Service Vulnerability

References:

• Cisco Homepage (Cisco )
  
• Cisco IOS Software Network Address Translation Vulnerability (Cisco)