Cisco VPN Client NETBIOS TCP Packet Denial Of Service Vulnerability

Bugtraq ID:	5649
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Sep 05 2002 12:00AM
Updated:	Sep 05 2002 12:00AM
Credit:	This issue was announced in a Cisco Security Advisory.
Vulnerable:	Cisco VPN Client for Windows 3.0 Cisco VPN Client for Windows 2.0
Not Vulnerable:	Cisco VPN Client for Windows 3.0.5

Cisco VPN Client NETBIOS TCP Packet Denial Of Service Vulnerability

Cisco VPN Client is reported to be prone to a denial of service condition upon receipt of NETBIOS TCP packets. It is possible for a remote attacker to exploit this condition to shut down a connection that the client has initiated by sending a NETBIOS packet to port 137 of the host running the client.

Cisco VPN Client NETBIOS TCP Packet Denial Of Service Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Cisco VPN Client NETBIOS TCP Packet Denial Of Service Vulnerability

Solution:
Users are advised to upgrade to versions 3.0.5 or later.


Cisco VPN Client for Windows 2.0

• Cisco VPN Client 3.0.5
  

Cisco VPN Client for Windows 3.0

• Cisco VPN Client 3.0.5
  

Cisco VPN Client NETBIOS TCP Packet Denial Of Service Vulnerability

References:

• Cisco VPN Client Multiple Vulnerabilities - Second Set (Cisco)