BID:7481

Cisco Optical Transport Platform Invalid Telnet Request Denial Of Service Vulnerability

Info

Cisco Optical Transport Platform Invalid Telnet Request Denial Of Service Vulnerability

Bugtraq ID:	7481
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	May 01 2003 12:00AM
Updated:	May 01 2003 12:00AM
Credit:	This issue was announced by the vendor.
Vulnerable:	Cisco ONS 15600 1.0 Cisco ONS 15454SDH 3.4 Cisco ONS 15454SDH 3.3 Cisco ONS 15454SDH 3.2 Cisco ONS 15454SDH 3.1 Cisco ONS 15454 Optical Transport Platform 4.0 (1) Cisco ONS 15454 Optical Transport Platform 3.4 Cisco ONS 15454 Optical Transport Platform 3.3 Cisco ONS 15454 Optical Transport Platform 3.2 .0 Cisco ONS 15454 Optical Transport Platform 3.1 .0 Cisco ONS 15454 Optical Transport Platform 3.0 Cisco ONS 15327 3.4 Cisco ONS 15327 3.3 Cisco ONS 15327 3.2 Cisco ONS 15327 3.1 Cisco ONS 15327 3.0

Not Vulnerable:	Cisco ONS 15600 1.1 Cisco ONS 15454SDH 4.0 Cisco ONS 15454 Optical Transport Platform 4.0 Cisco ONS 15327 4.0

Discussion

Cisco Optical Transport Platform Invalid Telnet Request Denial Of Service Vulnerability

It has been reported that invalid requests to the telnet service on a Cisco Optical Transport Platform system may result in the resetting of TCC+, XTC, TCCi, and TSC control cards. This could allow an attacker to cause an interruption of network service, and could be prolonged to act as a denial of service.

This condition was reportedly reproduced with the Nessus scanner.

Exploit / POC

Cisco Optical Transport Platform Invalid Telnet Request Denial Of Service Vulnerability

This issue may be exploited with the Nessus VxWorks binlogin overflow script.

Solution / Fix

Cisco Optical Transport Platform Invalid Telnet Request Denial Of Service Vulnerability

Solution:
Cisco has released software to address this issue. It should be noted that ONS Software 1.1 for ONS15600 platforms will not be available until September of 2003.

Cisco ONS 15600 1.0