CVE-2006-4650 - Secunia Advisories - Vulnerability Information

CVE Reference: CVE-2006-4650
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2006-4650

Description: Cisco IOS 12.0, 12.1, and 12.2, when GRE IP tunneling is used and the RFC2784 compliance fixes are missing, does not verify the offset field of a GRE packet during decapsulation, which leads to an integer overflow that references data from incorrect memory locations, which allows remote attackers to inject crafted packets into the routing queue, possibly bypassing intended router ACLs.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/28786 ST 1016799 SREASON http://securityreason.com/securityalert/1526 SAID Secunia Advisory: SA21783 OVAL http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:5713 OSVDB 28590 MISC http://www.phenoelit.de/stuff/CiscoGRE.txt CISCO http://www.cisco.com/en/US/tech/tk827/tk369/tsd_technology_security_response09186a008072cd7b.html BUGTRAQ http://www.securityfocus.com/archive/1/archive/1/445322/100/0/threaded BID 19878

Return to the previous page.