|
Cisco Access Point ARP Memory Exhaustion Denial of Service
|
|
Secunia Advisory:
|
SA18430
|
|
|
Release Date:
|
2006-01-13
|
|
Last Update:
|
2006-01-25
|
|
Popularity:
|
8,747 views
|
|
|
Critical:
|
Less critical
|
|
Impact:
|
DoS
|
|
Where:
|
From local network
|
|
Solution Status:
|
Vendor Patch
|
|
| OS: | Cisco Aironet 1100 Series Access Point
Cisco Aironet 1130 AG Series Access Point
Cisco Aironet 1200 Series Access Point
Cisco Aironet 1230 AG Series Access Point
Cisco Aironet 1240 AG Series Access Point
Cisco Aironet 1300 Series Access Point
Cisco Aironet 1400 Series Wireless Bridge
Cisco Aironet 350 Series Access Point
|
|
|
Secunia CVSS-2 Score:
|
Available in Secunia business solutions 
|
|
|
Subscribe:
|
Instant alerts on relevant vulnerabilities
|
|
| Advisory Content (Page 1 of 3) | [ 1 ] [ 2 ] [ 3 ] | |
|
Description:
A vulnerability has been reported in Cisco Aironet Wireless AP (Access Point), which can be exploited by malicious people to cause a DoS (Denial of Service).
The vulnerability is caused due to an error in the handling of spoofed ARP messages. This can be exploited by sending spoofed ARP messages to the management interface of the AP to continuously add entries to the ARP table of the device until the device runs out of memory.
Successful exploitation causes the AP to be unable to pass traffic until the device is restarted, but requires the ability to send ARP messages to the management interface of the AP.
The vulnerability has been reported in the following APs that run Cisco IOS Software:
* Cisco Aironet 1400 Series Wireless Bridges
* Cisco Aironet 1300 Series Access Points
* Cisco Aironet 1240AG Series Access Points
* Cisco Aironet 1230AG Series Access Points
* Cisco Aironet 1200 Series Access Points
* Cisco Aironet 1130AG Series Access Points
* Cisco Aironet 1100 Series Access Points
* Cisco Aironet 350 Series Access Points running IOS
Note: Cisco Wireless devices running a VxWorks based image (Version 12.05 and earlier) are reportedly not vulnerable.
Change Page:
[ 1 ] [ 2 ] [ 3 ]
|
|
|
Track this Secunia Advisory
|
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.
Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.
|
|
|
About this Secunia Advisory
|
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.
Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
|
