Cisco ONS Platform Vulnerabilities
BID:9699
Info
Cisco ONS Platform Vulnerabilities
| Bugtraq ID: | 9699 |
| Class: | Unknown |
| CVE: |
CVE-2004-0306 CVE-2004-0307 CVE-2004-0308 |
| Remote: | Yes |
| Local: | No |
| Published: | Feb 19 2004 12:00AM |
| Updated: | Jul 12 2009 03:06AM |
| Credit: | This issue was reported in a Cisco security advisory. |
| Vulnerable: |
Cisco ONS 15600 1.0 Cisco ONS 15454SDH 4.5 Cisco ONS 15454SDH 4.1 (2) Cisco ONS 15454SDH 4.1 (1) Cisco ONS 15454SDH 4.1 (0) Cisco ONS 15454SDH 4.0 Cisco ONS 15454 Optical Transport Platform 4.1 (3) Cisco ONS 15454 Optical Transport Platform 4.1 (2) Cisco ONS 15454 Optical Transport Platform 4.1 (1) Cisco ONS 15454 Optical Transport Platform 4.1 (0) Cisco ONS 15454 Optical Transport Platform 4.1 Cisco ONS 15454 Optical Transport Platform 4.0 (1) Cisco ONS 15454 Optical Transport Platform 4.0 Cisco ONS 15327 4.1 (2) Cisco ONS 15327 4.1 (1) Cisco ONS 15327 4.1 (0) Cisco ONS 15327 4.0 (2) Cisco ONS 15327 4.0 (1) Cisco ONS 15327 4.0 |
| Not Vulnerable: |
Cisco ONS 15600 1.3 (0) Cisco ONS 15600 1.1 (1) Cisco ONS 15600 1.1 (0) Cisco ONS 15454SDH 4.6 (1) Cisco ONS 15454 Optical Transport Platform 4.1 (3) Cisco ONS 15454 Optical Transport Platform 4.1 (1) Cisco ONS 15454 Optical Transport Platform 4.0 (2) Cisco ONS 15327 4.1 (3) Cisco ONS 15327 4.1 (1) Cisco ONS 15327 4.0 (2) |
Discussion
Cisco ONS Platform Vulnerabilities
Cisco has reported multiple vulnerabilities in the following platforms:
Cisco ONS 15327 Edge Optical Transport Platform
Cisco ONS 15454 Optical Transport Platform
Cisco ONS 15454 SDH Multiplexer Platform
Cisco ONS 15600 Multiservice Switching Platform
These issues could permit unauthorized access to devices, including unauthenticated access to GET/PUT TFTP commands on affected platforms, denial of service attacks via incomplete TCP transactions and an issue that may allow locked out superuser accounts to still authenticate.
It should be noted that the various ONS platforms are intended to be deployed on networks that are physically separated from the Internet, so exposure to these issues by remote attackers is limited.
Cisco has reported multiple vulnerabilities in the following platforms:
Cisco ONS 15327 Edge Optical Transport Platform
Cisco ONS 15454 Optical Transport Platform
Cisco ONS 15454 SDH Multiplexer Platform
Cisco ONS 15600 Multiservice Switching Platform
These issues could permit unauthorized access to devices, including unauthenticated access to GET/PUT TFTP commands on affected platforms, denial of service attacks via incomplete TCP transactions and an issue that may allow locked out superuser accounts to still authenticate.
It should be noted that the various ONS platforms are intended to be deployed on networks that are physically separated from the Internet, so exposure to these issues by remote attackers is limited.
Exploit / POC
Cisco ONS Platform Vulnerabilities
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
Cisco ONS Platform Vulnerabilities
Solution:
Cisco has released various fixes to address these issues.
The TFTP issue is fixed in the following releases:
15327 - 4.1(3) and later
15454, 15454 SDH - 4.6(1) and later, 4.1(3) and later
5600 - 1.3(0) and later, 1.1(0) and later
The ACK denial of service is fixed in the following releases:
15327 - 4.1(1) and later, 4.0(2) and later
15454, 15454 SDH - 4.6(1) and later, 4.1(1) and later, 4.0(2) and later
The locked-out superuser access issue is fixed in the following releases:
15327 - 4.1(3) and later
15454, 15454 SDH - 4.6(1) and later, 4.1(3) and later
15600 - 1.1(1), 5.0 and later (pending release)
Further details on obtaining fixes may be found in the attached advisory.
Solution:
Cisco has released various fixes to address these issues.
The TFTP issue is fixed in the following releases:
15327 - 4.1(3) and later
15454, 15454 SDH - 4.6(1) and later, 4.1(3) and later
5600 - 1.3(0) and later, 1.1(0) and later
The ACK denial of service is fixed in the following releases:
15327 - 4.1(1) and later, 4.0(2) and later
15454, 15454 SDH - 4.6(1) and later, 4.1(1) and later, 4.0(2) and later
The locked-out superuser access issue is fixed in the following releases:
15327 - 4.1(3) and later
15454, 15454 SDH - 4.6(1) and later, 4.1(3) and later
15600 - 1.1(1), 5.0 and later (pending release)
Further details on obtaining fixes may be found in the attached advisory.
References
Cisco ONS Platform Vulnerabilities
References:
References: