Cisco IOS Syslog Crash
BID:675
Info
Cisco IOS Syslog Crash
| Bugtraq ID: | 675 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 11 1999 12:00AM |
| Updated: | Jan 11 1999 12:00AM |
| Credit: | This problem was discovered by Olaf Selke <[email protected]> |
| Vulnerable: |
Cisco IOS 12.0.2 XD Cisco IOS 12.0.2 XC Cisco IOS 12.0.1 XE Cisco IOS 12.0.1 XB Cisco IOS 12.0.1 XA3 Cisco IOS 12.0.1 W Cisco IOS 12.0T Cisco IOS 12.0S Cisco IOS 12.0DB Cisco IOS 12.0 Cisco IOS 11.3DB Cisco IOS 11.3AA |
| Not Vulnerable: |
Cisco IOS 11.2.8 SA5 Cisco IOS 9.1 Cisco IOS 9.0 Cisco IOS 8.3 Cisco IOS 8.2 Cisco IOS 11.2 |
Discussion
Cisco IOS Syslog Crash
Cisco devices running classic IOS are reported prone to a denial of service vulnerability. The issue occurs when a vulnerable device receives and processes a UDP packet on UDP port 514 for syslog. This issue results in a crash or hang requiring a reboot.
Vulnerable IOS software may be found on the following Cisco devices:
- Cisco routers in the AGS/MGS/CGS/AGS+, IGS, RSM, 8xx, ubr9xx, 1xxx, 25xx, 26xx, 30xx, 36xx, 38xx, 40xx, 45xx, 47xx, AS52xx, AS53xx, AS58xx, 64xx, 70xx, 72xx (including the ubr72xx), 75xx, and 12xxx series.
-Recent versions of LS1010 ATM switch.
-Catalyst 2900XL LAN switch.
-Cisco DitributedDirector.
Cisco devices running classic IOS are reported prone to a denial of service vulnerability. The issue occurs when a vulnerable device receives and processes a UDP packet on UDP port 514 for syslog. This issue results in a crash or hang requiring a reboot.
Vulnerable IOS software may be found on the following Cisco devices:
- Cisco routers in the AGS/MGS/CGS/AGS+, IGS, RSM, 8xx, ubr9xx, 1xxx, 25xx, 26xx, 30xx, 36xx, 38xx, 40xx, 45xx, 47xx, AS52xx, AS53xx, AS58xx, 64xx, 70xx, 72xx (including the ubr72xx), 75xx, and 12xxx series.
-Recent versions of LS1010 ATM switch.
-Catalyst 2900XL LAN switch.
-Cisco DitributedDirector.
References
Cisco IOS Syslog Crash
References:
References: