Cisco VPN Concentrator ICMP Flood Remote Denial Of Service Vulnerability

Bugtraq ID:	7523
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	May 07 2003 12:00AM
Updated:	May 07 2003 12:00AM
Credit:	Vulnerability announced by Cisco.
Vulnerable:	Cisco VPN 3080 Concentrator Cisco VPN 3060 Concentrator Cisco VPN 3030 Concentrator Cisco VPN 3015 Concentrator Cisco VPN 3005 Concentrator 3.6.7 Cisco VPN 3005 Concentrator 3.6.5 Cisco VPN 3005 Concentrator 3.6.3 Cisco VPN 3002 Hardware Client Cisco VPN 3000 Concentrator 3.6.7 Cisco VPN 3000 Concentrator 3.6.1 Cisco VPN 3000 Concentrator 3.6 Cisco VPN 3000 Concentrator 3.5.5 Cisco VPN 3000 Concentrator 3.5.4 Cisco VPN 3000 Concentrator 3.5.3 Cisco VPN 3000 Concentrator 3.5.2 Cisco VPN 3000 Concentrator 3.5.1 Cisco VPN 3000 Concentrator 3.5 (Rel) Cisco VPN 3000 Concentrator 3.1.4 Cisco VPN 3000 Concentrator 3.1.2 Cisco VPN 3000 Concentrator 3.1.1 Cisco VPN 3000 Concentrator 3.1 (Rel) Cisco VPN 3000 Concentrator 3.1 Cisco VPN 3000 Concentrator 3.0.4 Cisco VPN 3000 Concentrator 3.0.3 (B) Cisco VPN 3000 Concentrator 3.0.3 (A) Cisco VPN 3000 Concentrator 3.0 Cisco VPN 3000 Concentrator 3.0 Cisco VPN 3000 Concentrator 2.5.2 (F) Cisco VPN 3000 Concentrator 2.5.2 (D) Cisco VPN 3000 Concentrator 2.5.2 (C) Cisco VPN 3000 Concentrator 2.5.2 (B) Cisco VPN 3000 Concentrator 2.5.2 (A) Cisco VPN 3000 Concentrator 2.0
Not Vulnerable:

Cisco VPN Concentrator ICMP Flood Remote Denial Of Service Vulnerability

It has been reported that the Cisco VPN Concentrator becomes unstable when flooded with some types of ICMP traffic. This could allow an attacker to deny service to legitmate users of the system.

Cisco VPN Concentrator ICMP Flood Remote Denial Of Service Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.