Cisco AS5350 Universal Gateway Portscan Denial Of Service Vulnerability

Bugtraq ID:	6059
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Oct 28 2002 12:00AM
Updated:	Oct 28 2002 12:00AM
Credit:	Discovery of this issue is credited to Thomas Munn <[email protected]>.
Vulnerable:	Cisco IOS 12.2(11)T Cisco AS5350
Not Vulnerable:

Cisco AS5350 Universal Gateway Portscan Denial Of Service Vulnerability

The Cisco AS5350 Universal Gateway is reported to be prone to a denial of service condition. It is possible to cause this condition by portscanning a vulnerable device.

This issue was reported for Cisco AS5350 devices running Cisco IOS release 12.2(11)T. Other firmware and devices may also be affected.

There are conflicting reports regarding the existence of this vulnerability. One source states that this condition reportedly does not occur if there are no Access Control Lists (ACL) applied on the device and also mentions that this may be related to a known SSH bug. Other sources have indicated that the issue may be related to a configuration problem.

Cisco AS5350 Universal Gateway Portscan Denial Of Service Vulnerability

This issue may be exploited using a portscanning utility such as nmap. The following example was provided:

nmap -Tinsane -p 1-65535 <target>

Cisco AS5350 Universal Gateway Portscan Denial Of Service Vulnerability

References:

• Re: CISCO as5350 crashes with nmap connect scan (Thomas Munn )
  
• Re: CISCO as5350 crashes with nmap connect scan (Thomas Munn )
  
• Re: CISCO as5350 crashes with nmap connect scan (Wendy Garvin )