Cisco IOS UDP Echo Service Memory Disclosure Vulnerability

Bugtraq ID:	8323
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	No
Local:	No
Published:	Aug 01 2003 12:00AM
Updated:	Aug 01 2003 12:00AM
Credit:	This vulnerability has been announced by the vendor.
Vulnerable:	Cisco IOS 12.0.19 Cisco IOS 12.0.7 (T) Cisco IOS 12.0.7 Cisco IOS 12.0.6 Cisco IOS 12.0.5 Cisco IOS 12.0.4 T Cisco IOS 12.0.4 S Cisco IOS 12.0.4 Cisco IOS 12.0.3 T2 Cisco IOS 12.0.3 Cisco IOS 12.0.2 XG Cisco IOS 12.0.2 XF Cisco IOS 12.0.2 XD Cisco IOS 12.0.2 XC Cisco IOS 12.0.2 Cisco IOS 12.0.1 XE Cisco IOS 12.0.1 XB Cisco IOS 12.0.1 XA3 Cisco IOS 12.0.1 W Cisco IOS 12.0.1 Cisco IOS 11.3.11 b Cisco IOS 11.3.1 T Cisco IOS 11.3.1 ED Cisco IOS 11.3.1 Cisco IOS 11.2.10 BC Cisco IOS 11.2.10 Cisco IOS 11.2.9 XA Cisco IOS 11.2.9 P Cisco IOS 11.2.8 SA5 Cisco IOS 11.2.8 SA3 Cisco IOS 11.2.8 SA1 Cisco IOS 11.2.8 P Cisco IOS 11.2.8 Cisco IOS 11.2.4 F1 Cisco IOS 11.2.4 F Cisco IOS 11.2.4 Cisco IOS 11.1.17 CT Cisco IOS 11.1.17 CC Cisco IOS 11.1.16 IA Cisco IOS 11.1.16 AA Cisco IOS 11.1.16 Cisco IOS 11.1.15 IA Cisco IOS 11.1.15 CA Cisco IOS 11.1.15 AA Cisco IOS 11.1.15 Cisco IOS 11.1.13 IA Cisco IOS 11.1.13 CA Cisco IOS 11.1.13 AA Cisco IOS 11.1.13 Cisco IOS 11.1.9 IA Cisco IOS 11.1.7 CA Cisco IOS 11.1.7 AA Cisco IOS 11.1.7 Cisco IOS 11.0.20 .3 Cisco IOS 11.0.17 BT Cisco IOS 11.0.17 Cisco IOS 11.0.12 (a)BT Cisco IOS 11.0.12 Cisco IOS 10.3.19 a Cisco IOS 10.3.16 Cisco IOS 10.3.4 .3 Cisco IOS 10.3.4 .2 Cisco IOS 10.3.3 .4 Cisco IOS 10.3.3 .3 Cisco IOS 9.14 Cisco IOS 9.1 Cisco IOS 9.0 Cisco IOS 8.3 Cisco IOS 8.2 Cisco IOS 12.0XW Cisco IOS 12.0XV Cisco IOS 12.0XU Cisco IOS 12.0XS Cisco IOS 12.0XR Cisco IOS 12.0XQ Cisco IOS 12.0XP Cisco IOS 12.0XN Cisco IOS 12.0XM Cisco IOS 12.0XL Cisco IOS 12.0XK Cisco IOS 12.0XJ Cisco IOS 12.0XI Cisco IOS 12.0XH Cisco IOS 12.0XG Cisco IOS 12.0XF Cisco IOS 12.0XE Cisco IOS 12.0XD Cisco IOS 12.0XC Cisco IOS 12.0XB Cisco IOS 12.0XA Cisco IOS 12.0WX Cisco IOS 12.0WT Cisco IOS 12.0WC Cisco IOS 12.0WC Cisco IOS 12.0WC Cisco IOS 12.0W5 Cisco IOS 12.0T Cisco IOS 12.0T Cisco IOS 12.0SZ Cisco IOS 12.0SZ Cisco IOS 12.0SY Cisco IOS 12.0SX Cisco IOS 12.0ST Cisco IOS 12.0SP Cisco IOS 12.0SL Cisco IOS 12.0SC Cisco IOS 12.0S Cisco IOS 12.0EV Cisco IOS 12.0DC Cisco IOS 12.0DB Cisco IOS 12.0DA Cisco IOS 12.0(9a) Cisco IOS 12.0(9)S8 Cisco IOS 12.0(9)S Cisco IOS 12.0(9) Cisco IOS 12.0(8a) Cisco IOS 12.0(8.3)SC Cisco IOS 12.0(8.0.2)S Cisco IOS 12.0(8)S1 Cisco IOS 12.0(8)S1 Cisco IOS 12.0(8) Cisco IOS 12.0(7a) Cisco IOS 12.0(7.4)S Cisco IOS 12.0(7)XV Cisco IOS 12.0(7)XK3 Cisco IOS 12.0(7)XK Cisco IOS 12.0(7)XF1 Cisco IOS 12.0(7)XF Cisco IOS 12.0(7)XE2 Cisco IOS 12.0(7)XE Cisco IOS 12.0(7)WX5(15a) Cisco IOS 12.0(7)T3 Cisco IOS 12.0(7)T2 Cisco IOS 12.0(7)T Cisco IOS 12.0(7)SC Cisco IOS 12.0(7)S1 Cisco IOS 12.0(7)DC1 Cisco IOS 12.0(7)DB2 Cisco IOS 12.0(6b) Cisco IOS 12.0(5.4)WC1 Cisco IOS 12.0(5.3)WC1 Cisco IOS 12.0(5.2)XU Cisco IOS 12.0(5.1)XP Cisco IOS 12.0(5)YB4 Cisco IOS 12.0(5)XU Cisco IOS 12.0(5)XS? Cisco IOS 12.0(5)XS Cisco IOS 12.0(5)XN1 Cisco IOS 12.0(5)XN Cisco IOS 12.0(5)XK2 Cisco IOS 12.0(5)XK Cisco IOS 12.0(5)XK Cisco IOS 12.0(5)XE? Cisco IOS 12.0(5)XE Cisco IOS 12.0(5)XE Cisco IOS 12.0(5)XE Cisco IOS 12.0(5)WX Cisco IOS 12.0(5)WC3b Cisco IOS 12.0(5)WC3 Cisco IOS 12.0(5)WC3 Cisco IOS 12.0(5)WC2b Cisco IOS 12.0(5)WC2b Cisco IOS 12.0(5)WC2 Cisco IOS 12.0(5)WC2 Cisco IOS 12.0(5)WC2 Cisco IOS 12.0(5)WC 2900XL-LRE Cisco IOS 12.0(5)T1 Cisco IOS 12.0(5)T Cisco IOS 12.0(4)XM1 Cisco IOS 12.0(4)XM Cisco IOS 12.0(4)XE1 Cisco IOS 12.0(4)XE Cisco IOS 12.0(3d) Cisco IOS 12.0(3)XE Cisco IOS 12.0(3) Cisco IOS 12.0(2b) Cisco IOS 12.0(26)W5(28a) Cisco IOS 12.0(26)W5(28) Cisco IOS 12.0(26) Cisco IOS 12.0(25)W5(27) Cisco IOS 12.0(25)S1 Cisco IOS 12.0(24.2)S Cisco IOS 12.0(24)S2 Cisco IOS 12.0(24)S1 Cisco IOS 12.0(23)S3 Cisco IOS 12.0(22)S5 Cisco IOS 12.0(21a) Cisco IOS 12.0(21)SX Cisco IOS 12.0(21)ST7 Cisco IOS 12.0(21)ST Cisco IOS 12.0(21)S7 Cisco IOS 12.0(21)S5a Cisco IOS 12.0(21)S4a Cisco IOS 12.0(21)S3 Cisco IOS 12.0(21)S1 Cisco IOS 12.0(21)S Cisco IOS 12.0(20a) Cisco IOS 12.0(20.4)SP Cisco IOS 12.0(20)W5(22b) Cisco IOS 12.0(20)W5(22b) Cisco IOS 12.0(20)SX Cisco IOS 12.0(20)ST6 Cisco IOS 12.0(20)ST2 Cisco IOS 12.0(20)SP1 Cisco IOS 12.0(2)XE? Cisco IOS 12.0(2)XE Cisco IOS 12.0(19a) Cisco IOS 12.0(19)ST6 Cisco IOS 12.0(19)ST2 Cisco IOS 12.0(19)ST Cisco IOS 12.0(19)SL4 Cisco IOS 12.0(19)S4 Cisco IOS 12.0(19)S2a Cisco IOS 12.0(19)S2 Cisco IOS 12.0(19)S Cisco IOS 12.0(18b) Cisco IOS 12.0(18)W5(22b) Cisco IOS 12.0(18)W5(22b) Cisco IOS 12.0(18)ST1 Cisco IOS 12.0(18)S7 Cisco IOS 12.0(18)S5a Cisco IOS 12.0(18)S5 Cisco IOS 12.0(18)S Cisco IOS 12.0(17a) Cisco IOS 12.0(17)ST8 Cisco IOS 12.0(17)ST5 Cisco IOS 12.0(17)ST1 Cisco IOS 12.0(17)SL9 Cisco IOS 12.0(17)SL6 Cisco IOS 12.0(17)SL2 Cisco IOS 12.0(17)S7 Cisco IOS 12.0(17)S4 Cisco IOS 12.0(17)S Cisco IOS 12.0(17) Cisco IOS 12.0(16a) Cisco IOS 12.0(16.06)S Cisco IOS 12.0(16)W5(21) Cisco IOS 12.0(16)ST1 Cisco IOS 12.0(16)SC3 Cisco IOS 12.0(16)S8a Cisco IOS 12.0(16)S8 Cisco IOS 12.0(16)S10 Cisco IOS 12.0(15a) Cisco IOS 12.0(15)S7 Cisco IOS 12.0(15)S6 Cisco IOS 12.0(15)S3 Cisco IOS 12.0(14a) Cisco IOS 12.0(14)W5(20) Cisco IOS 12.0(14)ST3 Cisco IOS 12.0(14)ST Cisco IOS 12.0(14)S8 Cisco IOS 12.0(14)S7 Cisco IOS 12.0(13a) Cisco IOS 12.0(13)WT6(1) Cisco IOS 12.0(13)W5(19c) Cisco IOS 12.0(13)S8 Cisco IOS 12.0(13)S6 Cisco IOS 12.0(12a) Cisco IOS 12.0(12)S4 Cisco IOS 12.0(12)S3 Cisco IOS 12.0(12)S3 Cisco IOS 12.0(11a) Cisco IOS 12.0(11)ST4 Cisco IOS 12.0(11)S6 Cisco IOS 12.0(10a) Cisco IOS 12.0(10)W5(18g) Cisco IOS 12.0(10)W5(18f) Cisco IOS 12.0(10)W5 Cisco IOS 12.0(10)S8 Cisco IOS 12.0(10)S7 Cisco IOS 12.0(10)S3b Cisco IOS 12.0(1)ST Cisco IOS 12.0(1)S Cisco IOS 12.0(1)S Cisco IOS 12.0(05)WC9 Cisco IOS 12.0 Cisco IOS 11.3XA Cisco IOS 11.3WA4 Cisco IOS 11.3T Cisco IOS 11.3NA Cisco IOS 11.3MA Cisco IOS 11.3HA Cisco IOS 11.3DB Cisco IOS 11.3DA Cisco IOS 11.3AA Cisco IOS 11.3(8)DB2 Cisco IOS 11.3(7)DB1 Cisco IOS 11.3(2)XA Cisco IOS 11.3(11d) Cisco IOS 11.3(11c) Cisco IOS 11.3(11b)T2 Cisco IOS 11.3(11b) Cisco IOS 11.3 Cisco IOS 11.2XA Cisco IOS 11.2WA4 Cisco IOS 11.2WA3 Cisco IOS 11.2SA Cisco IOS 11.2P Cisco IOS 11.2GS Cisco IOS 11.2F Cisco IOS 11.2BC Cisco IOS 11.2(9)XA Cisco IOS 11.2(8.9)SA6 Cisco IOS 11.2(4)XAf Cisco IOS 11.2(4)XA Cisco IOS 11.2(4) Cisco IOS 11.2(26e) Cisco IOS 11.2(26e) Cisco IOS 11.2(26b) Cisco IOS 11.2(26a) Cisco IOS 11.2(26)P5 Cisco IOS 11.2(26)P2 Cisco IOS 11.2(26)P2 Cisco IOS 11.2(23a)BC1 Cisco IOS 11.2(19a)GS6 Cisco IOS 11.2(19)GS0.2 Cisco IOS 11.2(17) Cisco IOS 11.2(15b) Cisco IOS 11.2(11b)T2 Cisco IOS 11.2 Cisco IOS 11.1IA Cisco IOS 11.1CT Cisco IOS 11.1CC Cisco IOS 11.1CA Cisco IOS 11.1AA Cisco IOS 11.1(36)CC4 Cisco IOS 11.1(36)CC2 Cisco IOS 11.1(36)CA4 Cisco IOS 11.1(36)CA2 Cisco IOS 11.1(28a)IA Cisco IOS 11.1(28a)CT Cisco IOS 11.1(24c) Cisco IOS 11.1(24c) Cisco IOS 11.1(24b) Cisco IOS 11.1(24a) Cisco IOS 11.1(20)AA4 Cisco IOS 11.1 Cisco IOS 11.0x Cisco IOS 11.0x Cisco IOS 11.0(22b) Cisco IOS 11.0(22a) Cisco IOS 11.0(18) Cisco IOS 11.0 Cisco IOS 11.0 Cisco IOS 10.3
Not Vulnerable:	Cisco IOS 12.0(3.6)W5(9.0.5) Cisco IOS 12.0(3.4)T Cisco IOS 12.0(3.3)S Cisco IOS 12.0(3.2)

Cisco IOS UDP Echo Service Memory Disclosure Vulnerability

It has been reported that under some circumstances, a Cisco appliance running IOS may answer malicious malformed UDP echo packets with replies that contain partial contents from the affected router's memory.

Cisco IOS UDP Echo Service Memory Disclosure Vulnerability

The following proof of concept exploit has been supplied by FX <[email protected]>:

• /data/vulnerabilities/exploits/iosniff.tgz

Cisco IOS UDP Echo Service Memory Disclosure Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Cisco IOS UDP Echo Service Memory Disclosure Vulnerability

References:

• Cisco IOS HTTP remote exploit (FX )