|
Cisco Various Products TCP Timestamp Denial of Service
|
|
Secunia Advisory:
|
SA15393
|
|
|
Release Date:
|
2005-05-19
|
|
Popularity:
|
10,722 views
|
|
|
Critical:
|
Less critical
|
|
Impact:
|
DoS
|
|
Where:
|
From remote
|
|
Solution Status:
|
Vendor Patch
|
|
| OS: | Cisco Aironet 1200 Series Access Point
Cisco Aironet 350 Series Access Point
Cisco Content Services Switch 11000 Series (WebNS)
Cisco MGX 8200 Series Edge Concentrators
Cisco MGX 8800 Series Multiservice Switches
Cisco MGX 8900 Series Multiservice Switches
Cisco SN5400 Series Storage Routers
|
|
|
Subscribe:
|
Instant alerts on relevant vulnerabilities 
|
|
| CVE reference: | CVE-2005-0356
|
|
Description:
A vulnerability has been reported in some Cisco products, which can be exploited by malicious people to cause a DoS (Denial of Service) on active TCP sessions.
The vulnerability is caused due to an error in the implementation of the TCP Timestamp option and can be exploited via specially crafted packets to cause a targeted TCP session to stall until it's reset.
Successful exploitation requires knowledge of IP address information of the source and destination of the TCP network connection.
The vulnerability affects the following products:
* SN5400 series storage routers
* CSS11000 series content services switches
* AP350 and AP1200 series Access Points running VxWorks
* MGX8200, MGX8800, and MGX8900 series WAN switches (only management interfaces)
Solution:
SN5400 series storage routers:
The vulnerability has been addressed by CSCin85370.
CSS11000 series content services switches:
The vulnerability has been addressed by CSCeh40395.
AP350 and AP1200 series Access Points:
The vendor recommends upgrading APs running VxWorks to Cisco IOS.
MGX series WAN switches:
The vulnerability has been documented by CSCeh85125 and CSCeh85130.
Provided and/or discovered by:
US-CERT credits Noritoshi Demizu.
Original Advisory:
Cisco:
http://www.cisco.com/warp/public/707/cisco-sn-20050518-tcpts.shtml
Other References:
US-CERT VU#637934:
http://www.kb.cert.org/vuls/id/637934
|
|
|
Track this Secunia Advisory
|
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.
Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.
|
|
|
About this Secunia Advisory
|
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.
Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
|
