Cisco Catalyst Non-Standard TCP Flags Remote Denial Of Service Vulnerability

Bugtraq ID:	8149
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Jul 09 2003 12:00AM
Updated:	Jul 09 2003 12:00AM
Credit:	Vulnerability disclosed by Cisco.
Vulnerable:	Cisco CatOS 7.4 Cisco CatOS 7.1 (2a) Cisco CatOS 7.1 (2) Cisco CatOS 7.1 (1a) Cisco CatOS 7.1 (1) Cisco CatOS 6.3 (5.10) Cisco CatOS 6.3 (5) Cisco CatOS 6.3 (4a) Cisco CatOS 6.3 (4) Cisco CatOS 6.3 (3a) Cisco CatOS 6.3 (3)x1 Cisco CatOS 6.3 (3)x Cisco CatOS 6.3 (3) Cisco CatOS 6.3 (2a) Cisco CatOS 6.3 (2) Cisco CatOS 6.3 (1) Cisco CatOS 6.2 (3a) Cisco CatOS 6.2 (3) Cisco CatOS 6.2 (2a) Cisco CatOS 6.2 (2) Cisco CatOS 6.2 (1a) Cisco CatOS 6.2 (1) Cisco CatOS 6.1 (4b) Cisco CatOS 6.1 (4) Cisco CatOS 6.1 (3a) Cisco CatOS 6.1 (3) Cisco CatOS 6.1 (2a) Cisco CatOS 6.1 (2) Cisco CatOS 6.1 (1e) Cisco CatOS 6.1 (1d) Cisco CatOS 6.1 (1c) Cisco CatOS 6.1 (1b) Cisco CatOS 6.1 (1a) Cisco CatOS 6.1 (1) Cisco CatOS 6.1 Cisco CatOS 5.5 (9) Cisco CatOS 5.5 (8a)CV Cisco CatOS 5.5 (8a) Cisco CatOS 5.5 (8) Cisco CatOS 5.5 (7a) Cisco CatOS 5.5 (7) Cisco CatOS 5.5 (6a) Cisco CatOS 5.5 (6) Cisco CatOS 5.5 (5) Cisco CatOS 5.5 (4b) Cisco CatOS 5.5 (4a) Cisco CatOS 5.5 (4) Cisco CatOS 5.5 (3) Cisco CatOS 5.5 (2) Cisco CatOS 5.5 (1a) Cisco CatOS 5.5 (13a) Cisco CatOS 5.5 (13.5) Cisco CatOS 5.5 (13) Cisco CatOS 5.5 (12a) Cisco CatOS 5.5 (12) Cisco CatOS 5.5 (11a) Cisco CatOS 5.5 (11) Cisco CatOS 5.5 (10a) Cisco CatOS 5.5 (10) Cisco CatOS 5.5 (1) Cisco CatOS 5.5 Cisco CatOS 5.4 (4a) Cisco CatOS 5.4 (4) Cisco CatOS 5.4 (3) Cisco CatOS 5.4 (2a) Cisco CatOS 5.4 (2) Cisco CatOS 5.4 (1) Cisco CatOS 5.4 Cisco CatOS 5.3 (6a)CSX Cisco CatOS 5.3 (6)CSX Cisco CatOS 5.3 (5a)CSX Cisco CatOS 5.3 (5)CSX Cisco CatOS 5.3 (4)CSX Cisco CatOS 5.3 (3)CSX Cisco CatOS 5.3 (2)CSX Cisco CatOS 5.3 (1a)CSX Cisco CatOS 5.2 (7a) Cisco CatOS 5.2 (7) Cisco CatOS 5.2 (6) Cisco CatOS 5.2 (5) Cisco CatOS 5.2 (4) Cisco CatOS 5.2 (3a)CSX Cisco CatOS 5.2 (3)CSX Cisco CatOS 5.2 (3) Cisco CatOS 5.2 (2)CSX Cisco CatOS 5.2 (2) Cisco CatOS 5.2 (1)CSX Cisco CatOS 5.2 (1) Cisco CatOS 5.1 (2b) Cisco CatOS 5.1 (2a) Cisco CatOS 5.1 (1a)CSX Cisco CatOS 5.1 (1a) Cisco CatOS 5.1 (1)CSX Cisco CatOS 5.1 (1) Cisco CatOS 4.5 (9) Cisco CatOS 4.5 (8) Cisco CatOS 4.5 (7) Cisco CatOS 4.5 (6a) Cisco CatOS 4.5 (6) Cisco CatOS 4.5 (5) Cisco CatOS 4.5 (4) Cisco CatOS 4.5 (3) Cisco CatOS 4.5 (2) Cisco CatOS 4.5 (13a) Cisco CatOS 4.5 (13) Cisco CatOS 4.5 (12a) Cisco CatOS 4.5 (12) Cisco CatOS 4.5 (11) Cisco CatOS 4.5 (10) Cisco CatOS 4.5 (1) Cisco CatOS 4.4 (1) Cisco CatOS 4.3 (1a) Cisco CatOS 4.2 (2) Cisco CatOS 4.2 (1) Cisco CatOS 4.1 (3) Cisco CatOS 4.1 (2) Cisco CatOS 4.1 (1) Cisco Catalyst 5000 5.5 (13)
Not Vulnerable:	Cisco CatOS 8.1 Cisco CatOS 7.6 (1) Cisco CatOS 7.6 Cisco CatOS 7.5 (1) Cisco CatOS 7.5 Cisco CatOS 7.4 (1) Cisco CatOS 7.3 (2) Cisco CatOS 7.3 (1) Cisco CatOS 7.3 Cisco CatOS 7.2 (1) Cisco CatOS 6.4 (3) Cisco CatOS 6.4 (2) Cisco CatOS 6.4 (1) Cisco CatOS 6.3 (6) Cisco CatOS 5.5 (14) Cisco CatOS 4.5 (14)

Cisco Catalyst Non-Standard TCP Flags Remote Denial Of Service Vulnerability

A problem with Cisco Catalyst switches has been reported in the handling of non-standard TCP packets. Because of this, an attacker may be able to deny legitimate user access to the switch.

Cisco Catalyst Non-Standard TCP Flags Remote Denial Of Service Vulnerability

This issue may be exploited with one of several free, publicly available network testing utilities.

Cisco Catalyst Non-Standard TCP Flags Remote Denial Of Service Vulnerability

Solution:
Cisco has made fixed versions of CatOS available. See referenced advisory for additional details on the availability of fixes.

Cisco Catalyst Non-Standard TCP Flags Remote Denial Of Service Vulnerability

References:

• Cisco Security Advisory: Denial-of-Service of TCP-based Services in CatOS (Cisco)