Cisco IOS MSFC2 Malformed Layer 2 Frame Denial Of Service Vulnerability

Bugtraq ID:	9562
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2004-0244
Remote:	Yes
Local:	No
Published:	Feb 03 2004 12:00AM
Updated:	Jul 12 2009 02:06AM
Credit:	The disclosure of this issue has been credited to the vendor.
Vulnerable:	Cisco IOS 12.2ZA Cisco IOS 12.2SY Cisco IOS 12.1E
Not Vulnerable:	Cisco IOS 12.2(14)ZA Cisco IOS 12.2(14)SY Cisco IOS 12.1(8b)E15 Cisco IOS 12.1(13)E1 Cisco IOS 12.1(11b)E14

Cisco IOS MSFC2 Malformed Layer 2 Frame Denial Of Service Vulnerability

A problem has been identified in the handling of specific types of traffic by Cisco 6000, 6500, and 7600 routers with the MSFC2 device. Because of this, an attacker could potentially crash a vulnerable system.

Cisco IOS MSFC2 Malformed Layer 2 Frame Denial Of Service Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

• /data/vulnerabilities/exploits/ciscoMultipleVulnsExploit.pl

Cisco IOS MSFC2 Malformed Layer 2 Frame Denial Of Service Vulnerability

Solution:
Cisco has released fixes to address this issue. Users are advised to contact the vendor and obtain fixes from the following location:

http://www.cisco.com/tacpage/sw-center/sw-ios.shtml

Cisco IOS MSFC2 Malformed Layer 2 Frame Denial Of Service Vulnerability

References:

• Cisco 6000/6500/7600 Crafted Layer 2 Frame Vulnerability (Cisco)