Cisco Catalyst Supervisor Remote Reload

Bugtraq ID:	705
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Dec 15 1997 12:00AM
Updated:	Dec 15 1997 12:00AM
Credit:	This vulnerability was first reported by Cisco in an advisory on 24 March 1999.
Vulnerable:	Cisco Catalyst 5xxx supervisor software 2.1.5 02 Cisco Catalyst 5xxx supervisor software 2.1.5 01 Cisco Catalyst 5xxx supervisor software 2.1.5 Cisco Catalyst 5xxx supervisor software 1.0 Cisco Catalyst 29xx supervisor software 2.1.5 02 Cisco Catalyst 29xx supervisor software 2.1.5 01 Cisco Catalyst 29xx supervisor software 2.1.5 Cisco Catalyst 29xx supervisor software 1.0 Cisco Catalyst 12xx supervisor software 4.29
Not Vulnerable:	Cisco Catalyst 5xxx supervisor software 2.1.6 Cisco Catalyst 29xx supervisor software 2.1.6 Cisco Catalyst 12xx supervisor software 4.30

Cisco Catalyst Supervisor Remote Reload

Solution:
Cisco is making free software upgrades available. Details are available in the advisory in the reference section.

For the Catalyst 29xx and Catalyst 5xxx switches, this vulnerability has Cisco bug ID CSCdi74333. The bug is present in all supervisor software versions through 2.1(5), including the spot fix releases 2.1(501) and 2.1(502). The bug is fixed in 2.1(6) and later versions, including all 2.2, 2.3, and 2.4 versions, and all 3.x, 4.x, and later versions.

For the Catalyst 1200, this vulnerability has Cisco bug ID CSCdj71684. The bug is present in all software versions through 4.29, and is fixed in 4.30 and later versions.

Cisco Catalyst Supervisor Remote Reload

References:

• Cisco Product Security Incident Response (Cisco Systems)