Vulnerabilities > CVE-2003-0567 - Improper Input Validation vulnerability in Cisco IOS
Attack vector
UNKNOWN Attack complexity
UNKNOWN Privileges required
UNKNOWN Confidentiality impact
UNKNOWN Integrity impact
UNKNOWN Availability impact
UNKNOWN Summary
Cisco IOS 11.x and 12.0 through 12.2 allows remote attackers to cause a denial of service (traffic block) by sending a particular sequence of IPv4 packets to an interface on the device, causing the input queue on that interface to be marked as full.
Vulnerable Configurations
Common Weakness Enumeration (CWE)
Common Attack Pattern Enumeration and Classification (CAPEC)
- Buffer Overflow via Environment Variables This attack pattern involves causing a buffer overflow through manipulation of environment variables. Once the attacker finds that they can modify an environment variable, they may try to overflow associated buffers. This attack leverages implicit trust often placed in environment variables.
- Server Side Include (SSI) Injection An attacker can use Server Side Include (SSI) Injection to send code to a web application that then gets executed by the web server. Doing so enables the attacker to achieve similar results to Cross Site Scripting, viz., arbitrary code execution and information disclosure, albeit on a more limited scale, since the SSI directives are nowhere near as powerful as a full-fledged scripting language. Nonetheless, the attacker can conveniently gain access to sensitive files, such as password files, and execute shell commands.
- Cross Zone Scripting An attacker is able to cause a victim to load content into their web-browser that bypasses security zone controls and gain access to increased privileges to execute scripting code or other web objects such as unsigned ActiveX controls or applets. This is a privilege elevation attack targeted at zone-based web-browser security. In a zone-based model, pages belong to one of a set of zones corresponding to the level of privilege assigned to that page. Pages in an untrusted zone would have a lesser level of access to the system and/or be restricted in the types of executable content it was allowed to invoke. In a cross-zone scripting attack, a page that should be assigned to a less privileged zone is granted the privileges of a more trusted zone. This can be accomplished by exploiting bugs in the browser, exploiting incorrect configuration in the zone controls, through a cross-site scripting attack that causes the attackers' content to be treated as coming from a more trusted page, or by leveraging some piece of system functionality that is accessible from both the trusted and less trusted zone. This attack differs from "Restful Privilege Escalation" in that the latter correlates to the inadequate securing of RESTful access methods (such as HTTP DELETE) on the server, while cross-zone scripting attacks the concept of security zones as implemented by a browser.
- Cross Site Scripting through Log Files An attacker may leverage a system weakness where logs are susceptible to log injection to insert scripts into the system's logs. If these logs are later viewed by an administrator through a thin administrative interface and the log data is not properly HTML encoded before being written to the page, the attackers' scripts stored in the log will be executed in the administrative interface with potentially serious consequences. This attack pattern is really a combination of two other attack patterns: log injection and stored cross site scripting.
- Command Line Execution through SQL Injection An attacker uses standard SQL injection methods to inject data into the command line for execution. This could be done directly through misuse of directives such as MSSQL_xp_cmdshell or indirectly through injection of data into the database that would be interpreted as shell commands. Sometime later, an unscrupulous backend application (or could be part of the functionality of the same application) fetches the injected data stored in the database and uses this data as command line arguments without performing proper validation. The malicious data escapes that data plane by spawning new commands to be executed on the host.
Exploit-Db
description Cisco IOS (using hping) Remote Denial of Service Exploit. CVE-2003-0567. Dos exploit for hardware platform id EDB-ID:62 last seen 2016-01-31 modified 2003-07-22 published 2003-07-22 reporter zerash source https://www.exploit-db.com/download/62/ title Cisco IOS using hping Remote Denial of Service Exploit description Cisco IOS IPv4 Packets Denial of Service Exploit. CVE-2003-0567. Dos exploit for hardware platform id EDB-ID:59 last seen 2016-01-31 modified 2003-07-18 published 2003-07-18 reporter l0cK source https://www.exploit-db.com/download/59/ title Cisco IOS IPv4 Packets Denial of Service Exploit description Cisco IOS IPv4 Packet Denial of Service Exploit (cisco-bug-44020.c). CVE-2003-0567. Dos exploit for hardware platform id EDB-ID:60 last seen 2016-01-31 modified 2003-07-21 published 2003-07-21 reporter Martin Kluge source https://www.exploit-db.com/download/60/ title Cisco IOS IPv4 Packet Denial of Service Exploit cisco-bug-44020.c
Nessus
NASL family CISCO NASL id CISCO-SA-20030717-BLOCKED.NASL description Cisco routers and switches running Cisco IOS software and configured to process Internet Protocol version 4 (IPv4) packets are vulnerable to a Denial of Service (DoS) attack. Multiple IPv4 packets with specific protocol fields sent directly to the device may cause the input interface to stop processing traffic once the input queue is full. Traffic passing through the device cannot block the input queue. No authentication is required to process the inbound packet. Processing of IPv4 packets is enabled by default. Devices running only IP version 6 (IPv6) are not affected. Multiple valid workarounds are available in the form of best practices for situations where software upgrades are not currently feasible. Cisco has made software available, free of charge, to correct the problem. last seen 2020-06-01 modified 2020-06-02 plugin id 48971 published 2010-09-01 reporter This script is (C) 2010-2018 Tenable Network Security, Inc. source https://www.tenable.com/plugins/nessus/48971 title Cisco IOS Interface Blocked by IPv4 Packets - Cisco Systems code # # (C) Tenable Network Security, Inc. # # Security advisory is (C) CISCO, Inc. # See https://www.cisco.com/en/US/products/products_security_advisory09186a00801a34c2.shtml if (NASL_LEVEL < 3000) exit(0); include("compat.inc"); if (description) { script_id(48971); script_version("1.18"); script_cve_id("CVE-2003-0567"); script_bugtraq_id(8211); script_xref(name:"CERT-CC", value:"411332"); script_xref(name:"CERT-CC", value:"CA-2003-15"); script_xref(name:"CERT-CC", value:"CA-2003-17"); script_xref(name:"CISCO-BUG-ID", value:"CSCdi22941"); script_xref(name:"CISCO-BUG-ID", value:"CSCdx02283"); script_xref(name:"CISCO-BUG-ID", value:"CSCdz71127"); script_xref(name:"CISCO-BUG-ID", value:"CSCea02355"); script_xref(name:"CISCO-SA", value:"cisco-sa-20030717-blocked"); script_xref(name:"EDB-ID", value:"59"); script_xref(name:"EDB-ID", value:"60"); script_xref(name:"EDB-ID", value:"62"); script_name(english:"Cisco IOS Interface Blocked by IPv4 Packets - Cisco Systems"); script_set_attribute(attribute:"synopsis", value: "The remote device is missing a vendor-supplied security patch." ); script_set_attribute(attribute:"description", value: 'Cisco routers and switches running Cisco IOS software and configured to process Internet Protocol version 4 (IPv4) packets are vulnerable to a Denial of Service (DoS) attack. Multiple IPv4 packets with specific protocol fields sent directly to the device may cause the input interface to stop processing traffic once the input queue is full. Traffic passing through the device cannot block the input queue. No authentication is required to process the inbound packet. Processing of IPv4 packets is enabled by default. Devices running only IP version 6 (IPv6) are not affected. Multiple valid workarounds are available in the form of best practices for situations where software upgrades are not currently feasible. Cisco has made software available, free of charge, to correct the problem. '); # https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20030717-blocked script_set_attribute(attribute:"see_also", value: "http://www.nessus.org/u?09cf3fb4"); # https://www.cisco.com/en/US/products/products_security_advisory09186a00801a34c2.shtml script_set_attribute(attribute:"see_also", value: "http://www.nessus.org/u?0cbca713"); script_set_attribute(attribute:"solution", value: "Apply the relevant patch referenced in Cisco Security Advisory cisco-sa-20030717-blocked." ); script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C"); script_set_attribute(attribute:"exploitability_ease", value:"No exploit is required"); script_set_attribute(attribute:"exploit_available", value:"true"); script_cwe_id(20); script_set_attribute(attribute:"plugin_type", value: "local"); script_set_attribute(attribute:"cpe", value: "cpe:/o:cisco:ios"); script_set_attribute(attribute:"vuln_publication_date", value: "2003/07/17"); script_set_attribute(attribute:"patch_publication_date", value: "2003/07/17"); script_set_attribute(attribute:"plugin_publication_date", value: "2010/09/01"); script_cvs_date("Date: 2018/11/15 20:50:20"); script_end_attributes(); script_summary(english:"Uses SNMP to determine if a flaw is present"); script_category(ACT_GATHER_INFO); script_copyright(english:"This script is (C) 2010-2018 Tenable Network Security, Inc."); script_family(english:"CISCO"); script_dependencie("cisco_ios_version.nasl"); script_require_keys("Host/Cisco/IOS/Version"); exit(0); } include("cisco_func.inc"); # version = get_kb_item_or_exit("Host/Cisco/IOS/Version"); # Affected: 10.x if (version =~ "^10\.") { security_hole(port:0, extra: '\nNo fix is available for 10.x releases. Upgrade to a supported version\n'); exit(0); } # Affected: 11.0 if (deprecated_version(version, "11.0")) { security_hole(port:0, extra: '\nNo fix is available for 11.0 releases. Upgrade to a supported version\n'); exit(0); } # Affected: 11.1 if (check_release(version: version, patched: make_list("11.1(24c)") )) { security_hole(port:0, extra: '\nUpdate to ' + patch_update + ' or later\n'); exit(0); } # Affected: 11.1AA if (check_release(version: version, patched: make_list("11.1(20)AA5") )) { security_hole(port:0, extra: '\nUpdate to ' + patch_update + ' or later\n'); exit(0); } # Affected: 11.1CA if (check_release(version: version, patched: make_list("11.1(36)CA4") )) { security_hole(port:0, extra: '\nUpdate to ' + patch_update + ' or later\n'); exit(0); } # Affected: 11.1CC if (check_release(version: version, patched: make_list("11.1(36)CC7") )) { security_hole(port:0, extra: '\nUpdate to ' + patch_update + ' or later\n'); exit(0); } # Affected: 11.2 if (check_release(version: version, patched: make_list("11.2(15b)", "11.2(26e)") )) { security_hole(port:0, extra: '\nUpdate to ' + patch_update + ' or later\n'); exit(0); } # Affected: 11.2P if (check_release(version: version, patched: make_list("11.2(17)P1", "11.2(20)P1", "11.2(26)P5") )) { security_hole(port:0, extra: '\nUpdate to ' + patch_update + ' or later\n'); exit(0); } # Affected: 11.2SA if (check_release(version: version, patched: make_list("11.2(8.11)SA6") )) { security_hole(port:0, extra: '\nUpdate to ' + patch_update + ' or later\n'); exit(0); } # Affected: 11.3 if (check_release(version: version, patched: make_list("11.3(11d)") )) { security_hole(port:0, extra: '\nUpdate to ' + patch_update + ' or later\n'); exit(0); } # Affected: 11.3T if (check_release(version: version, patched: make_list("11.3(11b)T3") )) { security_hole(port:0, extra: '\nUpdate to ' + patch_update + ' or later\n'); exit(0); } # Affected: 12.0 if (check_release(version: version, patched: make_list("12.0(15b)", "12.0(16b)", "12.0(19b)", "12.0(8b)", "12.0(26)"))) { security_hole(port:0, extra: '\nUpdate to ' + patch_update + ' or later\n'); exit(0); } if (deprecated_version(version, "12.0DA")) { security_hole(port:0, extra: '\nUpdate to 12.2(10)DA2 / 12.2(12)DA3 or later\n'); exit(0); } if (deprecated_version(version, "12.0DB")) { security_hole(port:0, extra: '\nUpdate to 12.3(1a) or later\n'); exit(0); } if (deprecated_version(version, "12.0DC")) { security_hole(port:0, extra: '\nUpdate to 12.3(1a) or later\n'); exit(0); } # Affected: 12.0S if (check_release(version: version, patched: make_list("12.0(10)S3b", "12.0(10)S8", "12.0(12)S4", "12.0(13)S8", "12.0(14)S8", "12.0(15)S7", "12.0(16)S10", "12.0(16)S8a", "12.0(17)S7", "12.0(18)S5a", "12.0(18)S7", "12.0(19)S2a", "12.0(19)S4", "12.0(21)S4a", "12.0(21)S5a", "12.0(21)S7", "12.0(22)S5", "12.0(23)S3", "12.0(24)S2", "12.0(25)S"))) { security_hole(port:0, extra: '\nUpdate to ' + patch_update + ' or later\n'); exit(0); } if (deprecated_version(version, "12.0SC")) { security_hole(port:0, extra: '\nUpdate to 12.1(19)EC or later\n'); exit(0); } if (check_release(version: version, patched: make_list("12.0(17)SL9") )) { security_hole(port:0, extra: '\nUpdate to ' + patch_update + ' or later\n'); exit(0); } if (check_release(version: version, patched: make_list("12.0(21)SP4") )) { security_hole(port:0, extra: '\nMigrate to 12.0(22)S5 or update to ' + patch_update + ' or later\n'); exit(0); } # Affected: 12.0ST if (check_release(version: version, patched: make_list("12.0(17)ST8", "12.0(19)ST6", "12.0(20)ST6", "12.0(21)ST3a", "12.0(21)ST7") )) { security_hole(port:0, extra: '\nUpdate to ' + patch_update + ' or later\n'); exit(0); } if (version == '12.0(21)SX') { security_hole(port:0, extra: '\nUpdate to 12.0(22)S5 or later\n'); exit(0); } if (version == '12.0(22)SX') { security_hole(port:0, extra: '\nNo fixes are available for 12.0(22)SX. Upgrade to a non-vulnerable version\n'); exit(0); } if (deprecated_version(version, "12.0SY")) { security_hole(port:0, extra: '\nUpdate to 12.0(23)S3 or later\n'); exit(0); } if (deprecated_version(version, "12.0SZ")) { security_hole(port:0, extra: '\nUpdate to 12.0(23)S3 or later\n'); exit(0); } # Affected: 12.0T if (check_release(version: version, patched: make_list("12.0(7)T3") )) { security_hole(port:0, extra: '\nUpdate to ' + patch_update + ' or later\n'); exit(0); } # Affected: 12.0W5 if ( "W5" >< version && # avoid flagging versions like W4 check_release(version: version, patched: make_list("12.0(24)W5(26c)", "12.0(26)W5(28)", "12.0(25)W5(27)"))) { security_hole(port:0, extra: '\nUpdate to ' + patch_update + ' or later\n'); exit(0); } # Affected: 12.0WC if (check_release(version: version, patched: make_list("12.0(5)WC8") )) { security_hole(port:0, extra: '\nUpdate to ' + patch_update + ' or later\n'); exit(0); } if (deprecated_version(version, "12.0WT")) { security_hole(port:0, extra: '\nNo fixes are available for 12.0WT releases. Upgrade to a supported version\n'); exit(0); } # All 12.0X(any letter) releases have migrated to either 12.0T or 12.1 unless otherwise # documented in the X release technical notes pertaining to the specific release. # Please check migration paths for all 12.0X releases. if (version =~ "^12\.0.+X[A-Z]") { security_hole(port:0, extra: '\n12.0X releases are no longer supported unless otherwise noted.' + '\nCheck the migration paths for all 12.0X releases\n'); exit(0); } # Affected: 12.1 if (check_release(version: version, patched: make_list("12.1(13a)", "12.1(17a)", "12.1(4b)", "12.1(6b)", "12.1(18.4)", "12.1(19)"))) { security_hole(port:0, extra: '\nUpdate to ' + patch_update + ' or later\n'); exit(0); } if (deprecated_version(version, "12.1AA")) { security_hole(port:0, extra: '\nUpdate to 12.2(17) or later\n'); exit(0); } # Affected: 12.1AX if (deprecated_version(version, "12.1AX")) { security_hole(port:0, extra: '\nUpdate to 12.1(14)EA1 or later\n'); exit(0); } # Affected: 12.1AY if (check_release(version: version, patched: make_list("12.1(13)AY"))) { security_hole(port:0, extra: '\nUpdate to ' + patch_update + ' or later\n'); exit(0); } if (deprecated_version(version, "12.1DA")) { security_hole(port:0, extra: '\nUpdate to 12.2(10)DA2 / 12.2(12)DA3 or later\n'); exit(0); } # Affected: 12.1DB if (check_release(version: version, patched: make_list("12.1(5)DB2"))) { security_hole(port:0, extra: '\nUpdate to ' + patch_update + ' or later\n'); exit(0); } # Affected: 12.1DC if (check_release(version: version, patched: make_list("12.1(5)DC3"))) { security_hole(port:0, extra: '\nUpdate to ' + patch_update + ' or later\n'); exit(0); } # Affected: 12.1E if (check_release(version: version, patched: make_list("12.1(6)E12", "12.1(7a)E1a", "12.1(8b)E14", "12.1(11b)E12", "12.1(12c)E7", "12.1(13)E7", "12.1(14)E4", "12.1(10)E6a", "12.1(11b)E0a", "12.1(7)E0a", "12.1(19)E"))) { security_hole(port:0, extra: '\nUpdate to ' + patch_update + ' or later\n'); exit(0); } if ( version == "12.1(4)EA" || version == "12.1(6)EA" || version == "12.1(8)EA" || version == "12.1(9)EA" || version == "12.1(11)EA" || version == "12.1(12c)EA" || version == "12.1(13)EA" ) { security_hole(port:0, extra: '\nUpdate to 12.1(13)EA1c or later\n'); exit(0); } # Affected: 12.1EB if (check_release(version: version, patched: make_list("12.1(14)EB"))) { security_hole(port:0, extra: '\nUpdate to ' + patch_update + ' or later\n'); exit(0); } # Affected: 12.1EC if (check_release(version: version, patched: make_list("12.1(13)EC4", "12.1(19)EC"))) { security_hole(port:0, extra: '\nUpdate to ' + patch_update + ' or later\n'); exit(0); } # Affected: 12.1EV if (check_release(version: version, patched: make_list("12.1(12c)EV2") )) { security_hole(port:0, extra: '\nUpdate to ' + patch_update + ' or later\n'); exit(0); } # Affected: 12.1EW if (check_release(version: version, patched: make_list("12.1(12c)EW2", "12.1(13)EW2", "12.1(19)EW"))) { security_hole(port:0, extra: '\nUpdate to ' + patch_update + ' or later\n'); exit(0); } # 12.1(1)EX to 12.1(8b)EX5 Migrate to 12.1(8b)E14 if ( check_release(version: version, patched: make_list("12.1(8b)EX5")) || version == '12.1(8b)EX5' ) { security_hole(port:0, extra: '\nUpdate to ' + patch_update + ' or later\n'); exit(0); } # 12.1(9)EX to current - To be determined (this should cover everything 12.1EX not caught by the check above) if (deprecated_version(version, "12.1EX")) { security_hole(port:0, extra: '\nNo fixes are available for releases 12.1(9)EX and later. Upgrade to a supported version\n'); exit(0); } # Affected: 12.1EY if (deprecated_version(version, "12.1EY")) { security_hole(port:0, extra: '\nUpdate to 12.1(14)E4 / 12.1(14)EB (LS1010 ONLY) or later\n'); exit(0); } # Affected: 12.1YJ if (deprecated_version(version, "12.1YJ")) { security_hole(port:0, extra: '\nUpdate to 12.1(14)EA1 or later\n'); exit(0); } # Affected: 12.1T if (check_release(version: version, patched: make_list("12.1(5)T15", "12.1(5)T8c") )) { security_hole(port:0, extra: '\nUpdate to ' + patch_update + ' or later\n'); exit(0); } if (deprecated_version(version, "12.1XA")) { security_hole(port:0, extra: '\nUpdate to 12.2(11)T9 or later\n'); exit(0); } if (deprecated_version(version, "12.1XC", "12.1XD", "12.1XH")) { security_hole(port:0, extra: '\nUpdate to 12.2(17) or later\n'); exit(0); } # Affected: 12.1XI if (check_release(version: version, patched: make_list("12.1(3a)XI9") )) { security_hole(port:0, extra: '\nUpdate to ' + patch_update + ' or later\n'); exit(0); } if (deprecated_version(version, "12.1XB", "12.1XF", "12.1XG", "12.1XJ", "12.1XL", "12.1XP", "12.1XR", "12.1XT", "12.1YB", "12.1YC", "12.1YD", "12.1YH")) { security_hole(port:0, extra: '\nUpdate to 12.2(15)T5 or later\n'); exit(0); } if (deprecated_version(version, "12.1XM", "12.1XQ", "12.1XV")) { security_hole(port:0, extra: '\nUpdate to 12.2(2)XB11 or later\n'); exit(0); } if (deprecated_version(version, "12.1XU")) { security_hole(port:0, extra: '\nUpdate to 12.2(4)T6 or later\n'); exit(0); } if (deprecated_version(version, "12.1YE", "12.1YF", "12.1YI")) { security_hole(port:0, extra: '\nUpdate to 12.2(2)YC or later\n'); exit(0); } # Affected: 12.2 if (check_release(version: version, patched: make_list("12.2(10d)", "12.2(12e)", "12.2(13b)M2", "12.2(16a)", "12.2(6j)", "12.2(7g)", "12.2(17)"))) { security_hole(port:0, extra: '\nUpdate to ' + patch_update + ' or later\n'); exit(0); } # Affected: 12.2B # 12.2(2)B-12.2(4)B7 if (check_release(version: version, patched: make_list("12.2(4)B7a"), oldest:"12.2(2)B")) { security_hole(port:0, extra: '\nUpdate to ' + patch_update + ' or later\n'); exit(0); } # 12.2(4)B8-12.2(16)B if (check_release(version: version, patched: make_list("12.2(16)B1"), oldest:"12.2(4)B8")) { security_hole(port:0, extra: '\nUpdate to ' + patch_update + ' or later\n'); exit(0); } # Affected: 12.2BC if (check_release(version: version, patched: make_list("12.2(11)BC3c", "12.2(15)BC1") )) { security_hole(port:0, extra: '\nUpdate to ' + patch_update + ' or later\n'); exit(0); } if (deprecated_version(version, "12.2BW")) { security_hole(port:0, extra: '\nUpdate to 12.3(1a) or later\n'); exit(0); } # Affected: 12.2BX if (check_release(version: version, patched: make_list("12.2(16)BX"))) { security_hole(port:0, extra: '\nUpdate to ' + patch_update + ' or later\n'); exit(0); } # Affected: 12.2BZ if (check_release(version: version, patched: make_list("12.2(15)BZ1"))) { security_hole(port:0, extra: '\nUpdate to ' + patch_update + ' or later\n'); exit(0); } if (deprecated_version(version, "12.2CX")) { security_hole(port:0, extra: '\nUpdate to 12.2(15)BC1 or later\n'); exit(0); } if (deprecated_version(version, "12.2CY")) { security_hole(port:0, extra: '\nUpdate to 12.2(15)BC1 or later\n'); exit(0); } # Affected: 12.2DA if (check_release(version: version, patched: make_list("12.2(10)DA2", "12.2(12)DA3") )) { security_hole(port:0, extra: '\nUpdate to ' + patch_update + ' or later\n'); exit(0); } if (deprecated_version(version, "12.2DD")) { security_hole(port:0, extra: '\nUpdate to 12.3(1a) or later\n'); exit(0); } if (deprecated_version(version, "12.2DX")) { security_hole(port:0, extra: '\nUpdate to 12.3(1a) or later\n'); exit(0); } # Affected: 12.2JA if (check_release(version: version, patched: make_list("12.2(11)JA"))) { security_hole(port:0, extra: '\nUpdate to ' + patch_update + ' or later\n'); exit(0); } # Affected: 12.2MB if (check_release(version: version, patched: make_list("12.2(4)MB12") )) { security_hole(port:0, extra: '\nUpdate to ' + patch_update + ' or later\n'); exit(0); } # Affected: 12.2MC if (check_release(version: version, patched: make_list("12.2(15)MC1") )) { security_hole(port:0, extra: '\nUpdate to ' + patch_update + ' or later\n'); exit(0); } # Affected: 12.2MX if (deprecated_version(version, "12.2MX")) { security_hole(port:0, extra: '\nUpdate to 12.2(8)YD or later\n'); exit(0); } # Affected: 12.2S if (check_release(version: version, patched: make_list("12.2(14)S1", "12.2(16.5)S") )) { security_hole(port:0, extra: '\nUpdate to ' + patch_update + ' or later\n'); exit(0); } # Affected: 12.2SX if (check_release(version: version, patched: make_list("12.2(14)SX1") )) { security_hole(port:0, extra: '\nUpdate to ' + patch_update + ' or later\n'); exit(0); } # Affected: 12.2SY if (check_release(version: version, patched: make_list("12.2(14)SY1") )) { security_hole(port:0, extra: '\nUpdate to ' + patch_update + ' or later\n'); exit(0); } # Affected: 12.2SZ if (check_release(version: version, patched: make_list("12.2(14)SZ2") )) { security_hole(port:0, extra: '\nUpdate to ' + patch_update + ' or later\n'); exit(0); } # Affected: 12.2T if (check_release(version: version, patched: make_list("12.2(11)T9", "12.2(13)T1a", "12.2(13)T5", "12.2(15)T5", "12.2(4)T6", "12.2(8)T0c", "12.2(8)T10", "12.2(16.5)T"))) { security_hole(port:0, extra: '\nUpdate to ' + patch_update + ' or later\n'); exit(0); } if (deprecated_version(version, "12.2XA")) { security_hole(port:0, extra: '\nUpdate to 12.2(11)T9 or later\n'); exit(0); } if (deprecated_version(version, "12.2XM")) { security_hole(port:0, extra: '\nUpdate to 12.2(4)YA6 or later\n'); exit(0); } # Affected: 12.2XS if (check_release(version: version, patched: make_list("12.2(1)XS1a"))) { security_hole(port:0, extra: '\nUpdate to ' + patch_update + ' or later\n'); exit(0); } if (deprecated_version(version, "12.2XD", "12.2XE", "12.2XH", "12.2XI", "12.2XJ", "12.2XK", "12.2XL", "12.2XQ", "12.2XU", "12.2XW", "12.2YB", "12.2YC", "12.2YF", "12.2YG", "12.2YH", "12.2YJ", "12.2YT")) { security_hole(port:0, extra: '\nUpdate to 12.2(15)T5 or later\n'); exit(0); } # Affected: 12.2YA if (check_release(version: version, patched: make_list("12.2(4)YA6") )) { security_hole(port:0, extra: '\nUpdate to ' + patch_update + ' or later\n'); exit(0); } if (deprecated_version(version, "12.2YN")) { security_hole(port:0, extra: '\nUpdate to 12.2(13)ZH2 or later\n'); exit(0); } if (deprecated_version(version, "12.2YO")) { security_hole(port:0, extra: '\nUpdate to 12.2(14)SY1 or later\n'); exit(0); } # Affected: 12.2XB if (check_release(version: version, patched: make_list("12.2(2)XB11") )) { security_hole(port:0, extra: '\nUpdate to ' + patch_update + ' or later\n'); exit(0); } if (deprecated_version(version, "12.2XC")) { security_hole(port:0, extra: '\nUpdate to 12.2(8)ZB7 or later\n'); exit(0); } if (deprecated_version(version, "12.2XF")) { security_hole(port:0, extra: '\nUpdate to 12.2(15)BC1 or later\n'); exit(0); } if (deprecated_version(version, "12.2XG")) { security_hole(port:0, extra: '\nUpdate to 12.2(8)T10 or later\n'); exit(0); } if (deprecated_version(version, "12.2XN", "12.2XT")) { security_hole(port:0, extra: '\nUpdate to 12.2(11)T9 or later\n'); exit(0); } if (deprecated_version(version, "12.2YD")) { security_hole(port:0, extra: '\nUpdate to 12.2(8)YY or later\n'); exit(0); } if (deprecated_version(version, "12.2YK")) { security_hole(port:0, extra: '\nUpdate to 12.2(13)ZC or later\n'); exit(0); } if (deprecated_version(version, "12.2YL", "12.2YM", "12.2YU", "12.2YV")) { security_hole(port:0, extra: '\nUpdate to 12.2(13)ZH2 or later\n'); exit(0); } # Affected: 12.2YP if (check_release(version: version, patched: make_list("12.2(11)YP1") )) { security_hole(port:0, extra: '\nUpdate to ' + patch_update + ' or later\n'); exit(0); } if (deprecated_version(version, "12.2YQ", "12.2YR")) { security_hole(port:0, extra: '\nUpdate to 12.2(15)ZL or later\n'); exit(0); } # Affected: 12.2YS if (check_release(version: version, patched: make_list("12.2(15)YS") )) { # the advisory says "12.2(15)YS/1.2(1)", assuming it's a typo security_hole(port:0, extra: '\nUpdate to ' + patch_update + ' or later\n'); exit(0); } # Affected: 12.2YW if (check_release(version: version, patched: make_list("12.2(8)YW2") )) { security_hole(port:0, extra: '\nUpdate to ' + patch_update + ' or later\n'); exit(0); } # Affected: 12.2YX if (check_release(version: version, patched: make_list("12.2(11)YX1") )) { security_hole(port:0, extra: '\nUpdate to ' + patch_update + ' or later\n'); exit(0); } # Affected: 12.2YY if (check_release(version: version, patched: make_list("12.2(8)YY3") )) { security_hole(port:0, extra: '\nUpdate to ' + patch_update + ' or later\n'); exit(0); } # Affected: 12.2YZ if (check_release(version: version, patched: make_list("12.2(11)YZ2") )) { security_hole(port:0, extra: '\nUpdate to ' + patch_update + ' or later\n'); exit(0); } # Affected: 12.2ZA if (check_release(version: version, patched: make_list("12.2(14)ZA2"))) { security_hole(port:0, extra: '\nUpdate to ' + patch_update + ' or later\n'); exit(0); } # Affected: 12.2ZB if (check_release(version: version, patched: make_list("12.2(8)ZB7") )) { security_hole(port:0, extra: '\nUpdate to ' + patch_update + ' or later\n'); exit(0); } # Affected: 12.2ZC if (check_release(version: version, patched: make_list("12.2(13)ZC"))) { security_hole(port:0, extra: '\nUpdate to ' + patch_update + ' or later\n'); exit(0); } if (deprecated_version(version, "12.2ZD")) { security_hole(port:0, extra: '\nNo fix is available for 12.2ZD releases. Update to a supported release\n'); exit(0); } # Affected: 12.2ZE if (deprecated_version(version, "12.2ZE")) { security_hole(port:0, extra: '\nUpdate to 12.3(1a) or later\n'); exit(0); } # Affected: 12.2ZF if (check_release(version: version, patched: make_list("12.2(13)ZF1") )) { security_hole(port:0, extra: '\nUpdate to ' + patch_update + ' or later\n'); exit(0); } if (deprecated_version(version, "12.2ZG")) { security_hole(port:0, extra: '\nUpdate to 12.2(13)ZH2 or later\n'); exit(0); } # Affected: 12.2ZH if (check_release(version: version, patched: make_list("12.2(13)ZH2") )) { security_hole(port:0, extra: '\nUpdate to ' + patch_update + ' or later\n'); exit(0); } # Affected: 12.2ZJ if (check_release(version: version, patched: make_list("12.2(15)ZJ1") )) { security_hole(port:0, extra: '\nUpdate to ' + patch_update + ' or later\n'); exit(0); } exit(0, "The remote host is not affected");NASL family CISCO NASL id CISCO_IPV4_DOS.NASL description According to its version number, the remote router or switch is running a vulnerable version of Cisco IOS. Sending a specific sequence of IPv4 packets can cause the input interface to stop accepting traffic. Note that this vulnerability does not affect devices that only use IPv6. last seen 2020-03-26 modified 2003-07-17 plugin id 11791 published 2003-07-17 reporter This script is (C) 2003-2020 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/11791 title Cisco IOS Malformed IPv4 Packet Remote DoS code # # (C) Tenable Network Security, Inc. # include("compat.inc"); if (description) { script_id(11791); script_version("1.29"); script_set_attribute(attribute:"plugin_modification_date", value:"2020/03/25"); script_cve_id("CVE-2003-0567"); script_bugtraq_id(8211); script_xref(name:"CERT-CC", value:"CA-2003-15"); script_name(english:"Cisco IOS Malformed IPv4 Packet Remote DoS"); script_summary(english:"Uses SNMP to determine if a flaw is present"); script_set_attribute( attribute:"synopsis", value:"The remote network device has a denial of service vulnerability." ); script_set_attribute( attribute:"description", value: "According to its version number, the remote router or switch is running a vulnerable version of Cisco IOS. Sending a specific sequence of IPv4 packets can cause the input interface to stop accepting traffic. Note that this vulnerability does not affect devices that only use IPv6." ); # https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20030717-blocked script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?09cf3fb4"); script_set_attribute(attribute:"solution", value:"Upgrade to the version of IOS referenced in the vendor's advisory."); script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C"); script_set_cvss_temporal_vector("CVSS2#E:POC/RL:OF/RC:C"); script_set_attribute(attribute:"cvss_score_source", value:"CVE-2003-0567"); script_set_attribute(attribute:"exploitability_ease", value:"Exploits are available"); script_set_attribute(attribute:"exploit_available", value:"true"); script_cwe_id(20); script_set_attribute(attribute:"vuln_publication_date", value:"2003/07/18"); script_set_attribute(attribute:"patch_publication_date", value:"2003/07/18"); script_set_attribute(attribute:"plugin_publication_date", value:"2003/07/17"); script_set_attribute(attribute:"plugin_type", value:"local"); script_set_attribute(attribute:"cpe",value:"cpe:/o:cisco:ios"); script_end_attributes(); script_category(ACT_GATHER_INFO); script_family(english:"CISCO"); script_copyright(english:"This script is (C) 2003-2020 and is owned by Tenable, Inc. or an Affiliate thereof."); script_dependencies("snmp_sysDesc.nasl", "snmp_cisco_type.nasl"); script_require_keys("SNMP/community", "SNMP/sysDesc"); exit(0); } # The code starts here ok=0; os = get_kb_item("SNMP/sysDesc"); if(!os)exit(0); # Check for the required operating system... #---------------------------------------------------------------- # Is this IOS ? if(!egrep(pattern:".*(Internetwork Operating|IOS).*", string:os))exit(0); # 11.1CA if(egrep(string:os, pattern:"(^|\s+)((11\.1\(([0-9]|[1-2][0-9]|3[0-5])\)|11\.1)CA[0-9]*|11\.1\(36\)CA[0-3]),"))ok=1; # 11.2 if(egrep(string:os, pattern:"(^|\s+)(11\.2\(([0-9]|[1-1][0-9]|2[0-5])\)|11\.2),"))ok=1; # 11.2P if(egrep(string:os, pattern:"(^|\s+)((11\.2\(([0-9]|[1-1][0-9]|2[0-5])\)|11\.2)P[0-9]*|11\.2\(26\)P[0-4]),"))ok=1; # 11.3 if(egrep(string:os, pattern:"(^|\s+)(11\.3\([0-9]*\)|11\.3),"))ok=1; # 11.3T if(egrep(string:os, pattern:"(^|\s+)(11\.3\([0-9]*\)|11\.3)T[0-9]*,"))ok=1; # 12.0 if(egrep(string:os, pattern:"(^|\s+)(12\.0\(([0-9]|[1-1][0-9]|2[0-5])\)|12\.0),"))ok=1; # 12.0DA if(egrep(string:os, pattern:"(^|\s+)(12\.0\([0-9]*\)|12\.0)DA[0-9]*,"))ok=1; # 12.0DB if(egrep(string:os, pattern:"(^|\s+)(12\.0\([0-9]*\)|12\.0)DB[0-9]*,"))ok=1; # 12.0DC if(egrep(string:os, pattern:"(^|\s+)(12\.0\([0-9]*\)|12\.0)DC[0-9]*,"))ok=1; # 12.0S if(egrep(string:os, pattern:"(^|\s+)((12\.0\(([0-9]|[1-1][0-9]|2[0-3])\)|12\.0)S[0-9]*|12\.0\(24\)S[0-1]),"))ok=1; # 12.0SC if(egrep(string:os, pattern:"(^|\s+)(12\.0\([0-9]*\)|12\.0)SC[0-9]*,"))ok=1; # 12.0SL if(egrep(string:os, pattern:"(^|\s+)(12\.0\([0-9]*\)|12\.0)SL[0-9]*,"))ok=1; # 12.0SP if(egrep(string:os, pattern:"(^|\s+)(12\.0\([0-9]*\)|12\.0)SP[0-9]*,"))ok=1; # 12.0ST if(egrep(string:os, pattern:"(^|\s+)((12\.0\(([0-9]|[1-1][0-9]|2[0-0])\)|12\.0)ST[0-9]*|12\.0\(21\)ST[0-6]),"))ok=1; # 12.0SX if(egrep(string:os, pattern:"(^|\s+)(12\.0\([0-9]*\)|12\.0)SX[0-9]*,"))ok=1; # 12.0SY if(egrep(string:os, pattern:"(^|\s+)(12\.0\([0-9]*\)|12\.0)SY[0-9]*,"))ok=1; # 12.0T if(egrep(string:os, pattern:"(^|\s+)((12\.0\([0-6]\)|12\.0)T[0-9]*|12\.0\(7\)T[0-2]),"))ok=1; # 12.0W5 if(egrep(string:os, pattern:"(^|\s+)(12\.0\([0-9]*\)|12\.0)W5[0-9]*,"))ok=1; # 12.0WC if(egrep(string:os, pattern:"(^|\s+)((12\.0\([0-4]\)|12\.0)WC[0-9]*|12\.0\(5\)WC[0-7]),"))ok=1; # 12.0WT if(egrep(string:os, pattern:"(^|\s+)(12\.0\([0-9]*\)|12\.0)WT[0-9]*,"))ok=1; # 12.0X if(egrep(string:os, pattern:"(^|\s+)(12\.0\([0-9]*\)|12\.0)X[0-9]*,"))ok=1; # 12.1 if(egrep(string:os, pattern:"(^|\s+)(12\.1\(([0-9]|1[0-8])\)|12\.1),"))ok=1; # 12.1AA if(egrep(string:os, pattern:"(^|\s+)(12\.1\([0-9]*\)|12\.1)AA[0-9]*,"))ok=1; # 12.1AX if(egrep(string:os, pattern:"(^|\s+)(12\.1\([0-9]*\)|12\.1)AX[0-9]*,"))ok=1; # 12.1AY if(egrep(string:os, pattern:"(^|\s+)(12\.1\(([0-9]|1[0-2])\)|12\.1)AY[0-9]*,"))ok=1; # 12.1DA if(egrep(string:os, pattern:"(^|\s+)(12\.1\([0-9]*\)|12\.1)DA[0-9]*,"))ok=1; # 12.1DB if(egrep(string:os, pattern:"(^|\s+)(12\.1\([0-9]*\)|12\.1)DB[0-9]*,"))ok=1; # 12.1DC if(egrep(string:os, pattern:"(^|\s+)(12\.1\([0-9]*\)|12\.1)DC[0-9]*,"))ok=1; # 12.1E if(egrep(string:os, pattern:"(^|\s+)(12\.1\(([0-9]|1[0-8])\)|12\.1)E[0-9]*,"))ok=1; # 12.1EA if(egrep(string:os, pattern:"(^|\s+)(12\.1\(([0-9]|1[0-2])\)|12\.1)EA[0-9]*,"))ok=1; # 12.1EB if(egrep(string:os, pattern:"(^|\s+)(12\.1\(([0-9]|1[0-3])\)|12\.1)EB[0-9]*,"))ok=1; # 12.1EC if(egrep(string:os, pattern:"(^|\s+)(12\.1\(([0-9]|1[0-8])\)|12\.1)EC[0-9]*,"))ok=1; # 12.1EV if(egrep(string:os, pattern:"(^|\s+)(12\.1\(([0-9]|1[0-1])\)|12\.1)EV[0-9]*,"))ok=1; # 12.1EW if(egrep(string:os, pattern:"(^|\s+)(12\.1\(([0-9]|1[0-8])\)|12\.1)EW[0-9]*,"))ok=1; # 12.1EX if(egrep(string:os, pattern:"(^|\s+)((12\.1\(([0-9]|1[0-2])\)|12\.1)EX[0-9]*|12\.1\(13\)EX[0-1]),"))ok=1; # 12.1EY if(egrep(string:os, pattern:"(^|\s+)((12\.1\(([0-9]|1[0-3])\)|12\.1)EY[0-9]*|12\.1\(14\)EY[0-3]),"))ok=1; # 12.1YJ if(egrep(string:os, pattern:"(^|\s+)((12\.1\(([0-9]|1[0-3])\)|12\.1)YJ[0-9]*|12\.1\(14\)YJ[0-0]),"))ok=1; # 12.1T if(egrep(string:os, pattern:"(^|\s+)((12\.1\([0-4]\)|12\.1)T[0-9]*|12\.1\(5\)T([0-9]|1[0-4])),"))ok=1; # 12.1X if(egrep(string:os, pattern:"(^|\s+)(12\.1\([0-9]*\)|12\.1)X[0-9]*,"))ok=1; # 12.1XA if(egrep(string:os, pattern:"(^|\s+)(12\.1\([0-9]*\)|12\.1)XA[0-9]*,"))ok=1; # 12.1XC if(egrep(string:os, pattern:"(^|\s+)(12\.1\([0-9]*\)|12\.1)XC[0-9]*,"))ok=1; # 12.1XD if(egrep(string:os, pattern:"(^|\s+)(12\.1\([0-9]*\)|12\.1)XD[0-9]*,"))ok=1; # 12.1XH if(egrep(string:os, pattern:"(^|\s+)(12\.1\([0-9]*\)|12\.1)XH[0-9]*,"))ok=1; # 12.1XI if(egrep(string:os, pattern:"(^|\s+)(12\.1\([0-9]*\)|12\.1)XI[0-9]*,"))ok=1; # 12.1XB if(egrep(string:os, pattern:"(^|\s+)(12\.1\([0-9]*\)|12\.1)XB[0-9]*,"))ok=1; # 12.1XF if(egrep(string:os, pattern:"(^|\s+)(12\.1\([0-9]*\)|12\.1)XF[0-9]*,"))ok=1; # 12.1XG if(egrep(string:os, pattern:"(^|\s+)(12\.1\([0-9]*\)|12\.1)XG[0-9]*,"))ok=1; # 12.1XJ if(egrep(string:os, pattern:"(^|\s+)(12\.1\([0-9]*\)|12\.1)XJ[0-9]*,"))ok=1; # 12.1XL if(egrep(string:os, pattern:"(^|\s+)(12\.1\([0-9]*\)|12\.1)XL[0-9]*,"))ok=1; # 12.1XP if(egrep(string:os, pattern:"(^|\s+)(12\.1\([0-9]*\)|12\.1)XP[0-9]*,"))ok=1; # 12.1XR if(egrep(string:os, pattern:"(^|\s+)(12\.1\([0-9]*\)|12\.1)XR[0-9]*,"))ok=1; # 12.1XT if(egrep(string:os, pattern:"(^|\s+)(12\.1\([0-9]*\)|12\.1)XT[0-9]*,"))ok=1; # 12.1YB if(egrep(string:os, pattern:"(^|\s+)(12\.1\([0-9]*\)|12\.1)YB[0-9]*,"))ok=1; # 12.1YC if(egrep(string:os, pattern:"(^|\s+)(12\.1\([0-9]*\)|12\.1)YC[0-9]*,"))ok=1; # 12.1YD if(egrep(string:os, pattern:"(^|\s+)(12\.1\([0-9]*\)|12\.1)YD[0-9]*,"))ok=1; # 12.1YH if(egrep(string:os, pattern:"(^|\s+)(12\.1\([0-9]*\)|12\.1)YH[0-9]*,"))ok=1; # 12.1XM if(egrep(string:os, pattern:"(^|\s+)(12\.1\([0-9]*\)|12\.1)XM[0-9]*,"))ok=1; # 12.1XQ if(egrep(string:os, pattern:"(^|\s+)(12\.1\([0-9]*\)|12\.1)XQ[0-9]*,"))ok=1; # 12.1XV if(egrep(string:os, pattern:"(^|\s+)(12\.1\([0-9]*\)|12\.1)XV[0-9]*,"))ok=1; # 12.1XU if(egrep(string:os, pattern:"(^|\s+)(12\.1\([0-9]*\)|12\.1)XU[0-9]*,"))ok=1; # 12.1YE if(egrep(string:os, pattern:"(^|\s+)(12\.1\([0-9]*\)|12\.1)YE[0-9]*,"))ok=1; # 12.1YF if(egrep(string:os, pattern:"(^|\s+)(12\.1\([0-9]*\)|12\.1)YF[0-9]*,"))ok=1; # 12.1YI if(egrep(string:os, pattern:"(^|\s+)(12\.1\([0-9]*\)|12\.1)YI[0-9]*,"))ok=1; # 12.2 if(egrep(string:os, pattern:"(^|\s+)(12\.2\(([0-9]|1[0-6])\)|12\.2),"))ok=1; # 12.2B if(egrep(string:os, pattern:"(^|\s+)((12\.2\(([0-9]|1[0-5])\)|12\.2)B[0-9]*|12\.2\(16\)B[0-0]),"))ok=1; # 12.2BC if(egrep(string:os, pattern:"(^|\s+)((12\.2\(([0-9]|1[0-4])\)|12\.2)BC[0-9]*|12\.2\(15\)BC[0-0]),"))ok=1; # 12.2BW if(egrep(string:os, pattern:"(^|\s+)(12\.2\([0-9]*\)|12\.2)BW[0-9]*,"))ok=1; # 12.2BX if(egrep(string:os, pattern:"(^|\s+)(12\.2\(([0-9]|1[0-5])\)|12\.2)BX[0-9]*,"))ok=1; # 12.2BZ if(egrep(string:os, pattern:"(^|\s+)(12\.2\([0-9]*\)|12\.2)BZ[0-9]*,"))ok=1; # 12.2CX if(egrep(string:os, pattern:"(^|\s+)(12\.2\([0-9]*\)|12\.2)CX[0-9]*,"))ok=1; # 12.2CY if(egrep(string:os, pattern:"(^|\s+)(12\.2\([0-9]*\)|12\.2)CY[0-9]*,"))ok=1; # 12.2DA if(egrep(string:os, pattern:"(^|\s+)((12\.2\(([0-9]|1[0-1])\)|12\.2)DA[0-9]*|12\.2\(12\)DA[0-2]),"))ok=1; # 12.2DD if(egrep(string:os, pattern:"(^|\s+)(12\.2\([0-9]*\)|12\.2)DD[0-9]*,"))ok=1; # 12.2JA if(egrep(string:os, pattern:"(^|\s+)(12\.2\(([0-9]|1[0-0])\)|12\.2)JA[0-9]*,"))ok=1; # 12.2MB if(egrep(string:os, pattern:"(^|\s+)((12\.2\([0-3]\)|12\.2)MB[0-9]*|12\.2\(4\)MB([0-9]|1[0-1])),"))ok=1; # 12.2MC if(egrep(string:os, pattern:"(^|\s+)((12\.2\(([0-9]|1[0-2])\)|12\.2)MC[0-9]*|12\.2\(13\)MC[0-0]),"))ok=1; # 12.2S if(egrep(string:os, pattern:"(^|\s+)((12\.2\(([0-9]|1[0-3])\)|12\.2)S[0-9]*|12\.2\(14\)S[0-0]),"))ok=1; # 12.2SY if(egrep(string:os, pattern:"(^|\s+)((12\.2\(([0-9]|1[0-3])\)|12\.2)SY[0-9]*|12\.2\(14\)SY[0-0]),"))ok=1; # 12.2SZ if(egrep(string:os, pattern:"(^|\s+)((12\.2\(([0-9]|1[0-3])\)|12\.2)SZ[0-9]*|12\.2\(14\)SZ[0-1]),"))ok=1; # 12.2T if(egrep(string:os, pattern:"(^|\s+)((12\.2\(([0-9]|1[0-4])\)|12\.2)T[0-9]*|12\.2\(15\)T[0-4]),"))ok=1; # 12.2X if(egrep(string:os, pattern:"(^|\s+)(12\.2\([0-9]*\)|12\.2)X[0-9]*,"))ok=1; # 12.2Y if(egrep(string:os, pattern:"(^|\s+)(12\.2\([0-9]*\)|12\.2)Y[0-9]*,"))ok=1; # 12.2XA if(egrep(string:os, pattern:"(^|\s+)(12\.2\([0-9]*\)|12\.2)XA[0-9]*,"))ok=1; # 12.2XS if(egrep(string:os, pattern:"(^|\s+)(12\.2\([0-9]*\)|12\.2)XS[0-9]*,"))ok=1; # 12.2XD if(egrep(string:os, pattern:"(^|\s+)(12\.2\([0-9]*\)|12\.2)XD[0-9]*,"))ok=1; # 12.2XE if(egrep(string:os, pattern:"(^|\s+)(12\.2\([0-9]*\)|12\.2)XE[0-9]*,"))ok=1; # 12.2XH if(egrep(string:os, pattern:"(^|\s+)(12\.2\([0-9]*\)|12\.2)XH[0-9]*,"))ok=1; # 12.2XI if(egrep(string:os, pattern:"(^|\s+)(12\.2\([0-9]*\)|12\.2)XI[0-9]*,"))ok=1; # 12.2XJ if(egrep(string:os, pattern:"(^|\s+)(12\.2\([0-9]*\)|12\.2)XJ[0-9]*,"))ok=1; # 12.2XK if(egrep(string:os, pattern:"(^|\s+)(12\.2\([0-9]*\)|12\.2)XK[0-9]*,"))ok=1; # 12.2XL if(egrep(string:os, pattern:"(^|\s+)(12\.2\([0-9]*\)|12\.2)XL[0-9]*,"))ok=1; # 12.2XM if(egrep(string:os, pattern:"(^|\s+)(12\.2\([0-9]*\)|12\.2)XM[0-9]*,"))ok=1; # 12.2XQ if(egrep(string:os, pattern:"(^|\s+)(12\.2\([0-9]*\)|12\.2)XQ[0-9]*,"))ok=1; # 12.2XU if(egrep(string:os, pattern:"(^|\s+)(12\.2\([0-9]*\)|12\.2)XU[0-9]*,"))ok=1; # 12.2XW if(egrep(string:os, pattern:"(^|\s+)(12\.2\([0-9]*\)|12\.2)XW[0-9]*,"))ok=1; # 12.2YA if(egrep(string:os, pattern:"(^|\s+)(12\.2\([0-9]*\)|12\.2)YA[0-9]*,"))ok=1; # 12.2YB if(egrep(string:os, pattern:"(^|\s+)(12\.2\([0-9]*\)|12\.2)YB[0-9]*,"))ok=1; # 12.2YC if(egrep(string:os, pattern:"(^|\s+)(12\.2\([0-9]*\)|12\.2)YC[0-9]*,"))ok=1; # 12.2YF if(egrep(string:os, pattern:"(^|\s+)(12\.2\([0-9]*\)|12\.2)YF[0-9]*,"))ok=1; # 12.2YG if(egrep(string:os, pattern:"(^|\s+)(12\.2\([0-9]*\)|12\.2)YG[0-9]*,"))ok=1; # 12.2YH if(egrep(string:os, pattern:"(^|\s+)(12\.2\([0-9]*\)|12\.2)YH[0-9]*,"))ok=1; # 12.2YJ if(egrep(string:os, pattern:"(^|\s+)(12\.2\([0-9]*\)|12\.2)YJ[0-9]*,"))ok=1; # 12.2YT if(egrep(string:os, pattern:"(^|\s+)(12\.2\([0-9]*\)|12\.2)YT[0-9]*,"))ok=1; # 12.2YN if(egrep(string:os, pattern:"(^|\s+)(12\.2\([0-9]*\)|12\.2)YN[0-9]*,"))ok=1; # 12.2YO if(egrep(string:os, pattern:"(^|\s+)(12\.2\([0-9]*\)|12\.2)YO[0-9]*,"))ok=1; # 12.2XB if(egrep(string:os, pattern:"(^|\s+)((12\.2\([0-1]\)|12\.2)XB[0-9]*|12\.2\(2\)XB([0-9]|1[0-0])),"))ok=1; # 12.2XC if(egrep(string:os, pattern:"(^|\s+)(12\.2\([0-9]*\)|12\.2)XC[0-9]*,"))ok=1; # 12.2XF if(egrep(string:os, pattern:"(^|\s+)(12\.2\([0-9]*\)|12\.2)XF[0-9]*,"))ok=1; # 12.2XG if(egrep(string:os, pattern:"(^|\s+)(12\.2\([0-9]*\)|12\.2)XG[0-9]*,"))ok=1; # 12.2XN if(egrep(string:os, pattern:"(^|\s+)(12\.2\([0-9]*\)|12\.2)XN[0-9]*,"))ok=1; # 12.2XT if(egrep(string:os, pattern:"(^|\s+)(12\.2\([0-9]*\)|12\.2)XT[0-9]*,"))ok=1; # 12.2YD if(egrep(string:os, pattern:"(^|\s+)(12\.2\([0-9]*\)|12\.2)YD[0-9]*,"))ok=1; # 12.2YP if(egrep(string:os, pattern:"(^|\s+)((12\.2\(([0-9]|1[0-0])\)|12\.2)YP[0-9]*|12\.2\(11\)YP[0-0]),"))ok=1; # 12.2YK if(egrep(string:os, pattern:"(^|\s+)(12\.2\([0-9]*\)|12\.2)YK[0-9]*,"))ok=1; # 12.2YL if(egrep(string:os, pattern:"(^|\s+)(12\.2\([0-9]*\)|12\.2)YL[0-9]*,"))ok=1; # 12.2YM if(egrep(string:os, pattern:"(^|\s+)(12\.2\([0-9]*\)|12\.2)YM[0-9]*,"))ok=1; # 12.2YU if(egrep(string:os, pattern:"(^|\s+)(12\.2\([0-9]*\)|12\.2)YU[0-9]*,"))ok=1; # 12.2YV if(egrep(string:os, pattern:"(^|\s+)(12\.2\([0-9]*\)|12\.2)YV[0-9]*,"))ok=1; # 12.2YQ if(egrep(string:os, pattern:"(^|\s+)(12\.2\([0-9]*\)|12\.2)YQ[0-9]*,"))ok=1; # 12.2YR if(egrep(string:os, pattern:"(^|\s+)(12\.2\([0-9]*\)|12\.2)YR[0-9]*,"))ok=1; # 12.2YS if(egrep(string:os, pattern:"(^|\s+)(12\.2\(([0-9]|1[0-4])\)|12\.2)YS[0-9]*,"))ok=1; # 12.2YW if(egrep(string:os, pattern:"(^|\s+)((12\.2\([0-7]\)|12\.2)YW[0-9]*|12\.2\(8\)YW[0-1]),"))ok=1; # 12.2YX if(egrep(string:os, pattern:"(^|\s+)((12\.2\(([0-9]|1[0-0])\)|12\.2)YX[0-9]*|12\.2\(11\)YX[0-0]),"))ok=1; # 12.2YY if(egrep(string:os, pattern:"(^|\s+)((12\.2\([0-7]\)|12\.2)YY[0-9]*|12\.2\(8\)YY[0-2]),"))ok=1; # 12.2YZ if(egrep(string:os, pattern:"(^|\s+)((12\.2\(([0-9]|1[0-0])\)|12\.2)YZ[0-9]*|12\.2\(11\)YZ[0-1]),"))ok=1; # 12.2ZA if(egrep(string:os, pattern:"(^|\s+)((12\.2\(([0-9]|1[0-3])\)|12\.2)ZA[0-9]*|12\.2\(14\)ZA[0-1]),"))ok=1; # 12.2ZB if(egrep(string:os, pattern:"(^|\s+)((12\.2\([0-7]\)|12\.2)ZB[0-9]*|12\.2\(8\)ZB[0-6]),"))ok=1; # 12.2ZC if(egrep(string:os, pattern:"(^|\s+)(12\.2\(([0-9]|1[0-2])\)|12\.2)ZC[0-9]*,"))ok=1; # 12.2ZD if(egrep(string:os, pattern:"(^|\s+)(12\.2\([0-9]*\)|12\.2)ZD[0-9]*,"))ok=1; # 12.2ZE if(egrep(string:os, pattern:"(^|\s+)(12\.2\([0-9]*\)|12\.2)ZE[0-9]*,"))ok=1; # 12.2ZJ if(egrep(string:os, pattern:"(^|\s+)((12\.2\(([0-9]|1[0-4])\)|12\.2)ZJ[0-9]*|12\.2\(15\)ZJ[0-0]),"))ok=1; #---------------------------------------------- if(ok)security_hole(port:161, proto:"udp");
Oval
| accepted | 2008-09-08T04:00:29.991-04:00 | ||||
| class | vulnerability | ||||
| contributors |
| ||||
| description | Cisco IOS 11.x and 12.0 through 12.2 allows remote attackers to cause a denial of service (traffic block) by sending a particular sequence of IPv4 packets to an interface on the device, causing the input queue on that interface to be marked as full. | ||||
| family | ios | ||||
| id | oval:org.mitre.oval:def:5603 | ||||
| status | accepted | ||||
| submitted | 2008-05-26T11:06:36.000-04:00 | ||||
| title | Cisco Systems IOS 11.x/12.x DoS Vulnerability | ||||
| version | 3 |
References
- http://www.cert.org/advisories/CA-2003-15.html
- http://www.cert.org/advisories/CA-2003-17.html
- http://lists.grok.org.uk/pipermail/full-disclosure/2003-July/006743.html
- http://www.cisco.com/warp/public/707/cisco-sa-20030717-blocked.shtml
- http://www.kb.cert.org/vuls/id/411332
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5603