Vulnerabilities > CVE-2003-0567 - Improper Input Validation vulnerability in Cisco products

CVSS 7.8 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

COMPLETE

network

low complexity

cisco

CWE-20

nessus

exploit available

NVD

Published: 2003-08-18

Updated: 2018-10-30

Summary

Cisco IOS 11.x and 12.0 through 12.2 allows remote attackers to cause a denial of service (traffic block) by sending a particular sequence of IPv4 packets to an interface on the device, causing the input queue on that interface to be marked as full.

Vulnerable Configurations

Part	Description	Count
OS	Cisco Cisco IOS 11.0 Cisco IOS 11.1 Cisco IOS 11.1Aa Cisco IOS 11.1Ca Cisco IOS 11.1Cc Cisco IOS 11.2 Cisco IOS 11.2P Cisco IOS 11.2Sa Cisco IOS 11.3 Cisco IOS 11.3T Cisco IOS 12.0 Cisco IOS 12.0Da Cisco IOS 12.0Db Cisco IOS 12.0Dc Cisco IOS 12.0S Cisco IOS 12.0Sc Cisco IOS 12.0Sl Cisco IOS 12.0Sp Cisco IOS 12.0St Cisco IOS 12.0Sx Cisco IOS 12.0Sy Cisco IOS 12.0Sz Cisco IOS 12.0T Cisco IOS 12.0W5 Cisco IOS 12.0Wc Cisco IOS 12.0Wt Cisco IOS 12.0Xa Cisco IOS 12.0Xb Cisco IOS 12.0Xc Cisco IOS 12.0Xd Cisco IOS 12.0Xe Cisco IOS 12.0Xf Cisco IOS 12.0Xg Cisco IOS 12.0Xh Cisco IOS 12.0Xi Cisco IOS 12.0Xj Cisco IOS 12.0Xk Cisco IOS 12.0Xl Cisco IOS 12.0Xm Cisco IOS 12.0Xn Cisco IOS 12.0Xp Cisco IOS 12.0Xq Cisco IOS 12.0Xr Cisco IOS 12.0Xs Cisco IOS 12.0Xu Cisco IOS 12.0Xv Cisco IOS 12.0Xw Cisco IOS 12.1 Cisco IOS 12.1Aa Cisco IOS 12.1Ax Cisco IOS 12.1Ay Cisco IOS 12.1Da Cisco IOS 12.1Db Cisco IOS 12.1Dc Cisco IOS 12.1E Cisco IOS 12.1Ea Cisco IOS 12.1Eb Cisco IOS 12.1Ec Cisco IOS 12.1Ev Cisco IOS 12.1Ew Cisco IOS 12.1Ex Cisco IOS 12.1Ey Cisco IOS 12.1M Cisco IOS 12.1T Cisco IOS 12.1Xa Cisco IOS 12.1Xb Cisco IOS 12.1Xc Cisco IOS 12.1Xd Cisco IOS 12.1Xe Cisco IOS 12.1Xf Cisco IOS 12.1Xg Cisco IOS 12.1Xh Cisco IOS 12.1Xi Cisco IOS 12.1Xj Cisco IOS 12.1Xk Cisco IOS 12.1Xl Cisco IOS 12.1Xm Cisco IOS 12.1Xp Cisco IOS 12.1Xq Cisco IOS 12.1Xr Cisco IOS 12.1Xs Cisco IOS 12.1Xt Cisco IOS 12.1Xu Cisco IOS 12.1Xv Cisco IOS 12.1Xw Cisco IOS 12.1Xx Cisco IOS 12.1Xy Cisco IOS 12.1Xz Cisco IOS 12.1Yb Cisco IOS 12.1Yc Cisco IOS 12.1Yd Cisco IOS 12.1Ye Cisco IOS 12.1Yf Cisco IOS 12.1Yh Cisco IOS 12.1Yi Cisco IOS 12.1Yj Cisco IOS 12.2 Cisco IOS 12.2B Cisco IOS 12.2Bc Cisco IOS 12.2Bw Cisco IOS 12.2Bx Cisco IOS 12.2Bz Cisco IOS 12.2Cx Cisco IOS 12.2Cy Cisco IOS 12.2Da Cisco IOS 12.2Dd Cisco IOS 12.2Dx Cisco IOS 12.2Ja Cisco IOS 12.2Mb Cisco IOS 12.2Mc Cisco IOS 12.2Mx Cisco IOS 12.2S Cisco IOS 12.2Sx Cisco IOS 12.2Sy Cisco IOS 12.2Sz Cisco IOS 12.2T Cisco IOS 12.2Xa Cisco IOS 12.2Xb Cisco IOS 12.2Xc Cisco IOS 12.2Xd Cisco IOS 12.2Xe Cisco IOS 12.2Xf Cisco IOS 12.2Xg Cisco IOS 12.2Xh Cisco IOS 12.2Xi Cisco IOS 12.2Xj Cisco IOS 12.2Xk Cisco IOS 12.2Xl Cisco IOS 12.2Xm Cisco IOS 12.2Xn Cisco IOS 12.2Xq Cisco IOS 12.2Xr Cisco IOS 12.2Xs Cisco IOS 12.2Xt Cisco IOS 12.2Xu Cisco IOS 12.2Xw Cisco IOS 12.2Ya Cisco IOS 12.2Yb Cisco IOS 12.2Yc Cisco IOS 12.2Yd Cisco IOS 12.2Yf Cisco IOS 12.2Yg Cisco IOS 12.2Yh Cisco IOS 12.2Yj Cisco IOS 12.2Yk Cisco IOS 12.2Yl Cisco IOS 12.2Ym Cisco IOS 12.2Yn Cisco IOS 12.2Yo Cisco IOS 12.2Yp Cisco IOS 12.2Yq Cisco IOS 12.2Yr Cisco IOS 12.2Ys Cisco IOS 12.2Yt Cisco IOS 12.2Yu Cisco IOS 12.2Yv Cisco IOS 12.2Yw Cisco IOS 12.2Yx Cisco IOS 12.2Yy Cisco IOS 12.2Yz Cisco IOS 12.2Za Cisco IOS 12.2Zb Cisco IOS 12.2Zc Cisco IOS 12.2Zd Cisco IOS 12.2Ze Cisco IOS 12.2Zf Cisco IOS 12.2Zg Cisco IOS 12.2Zh Cisco IOS 12.2Zj	169
Application	Cisco Cisco Optical Networking Systems Software 3.0 Cisco Optical Networking Systems Software 3.1.0 Cisco Optical Networking Systems Software 3.2.0 Cisco Optical Networking Systems Software 3.3.0 Cisco Optical Networking Systems Software 3.4.0 Cisco Optical Networking Systems Software 4.0.0	6
Hardware	Cisco Cisco ONS 15454 Optical Transport Platform *	1

Common Weakness Enumeration (CWE)

CWE-20 - Improper Input Validation

Common Attack Pattern Enumeration and Classification (CAPEC)

Buffer Overflow via Environment Variables
This attack pattern involves causing a buffer overflow through manipulation of environment variables. Once the attacker finds that they can modify an environment variable, they may try to overflow associated buffers. This attack leverages implicit trust often placed in environment variables.
Server Side Include (SSI) Injection
An attacker can use Server Side Include (SSI) Injection to send code to a web application that then gets executed by the web server. Doing so enables the attacker to achieve similar results to Cross Site Scripting, viz., arbitrary code execution and information disclosure, albeit on a more limited scale, since the SSI directives are nowhere near as powerful as a full-fledged scripting language. Nonetheless, the attacker can conveniently gain access to sensitive files, such as password files, and execute shell commands.
Cross Zone Scripting
An attacker is able to cause a victim to load content into their web-browser that bypasses security zone controls and gain access to increased privileges to execute scripting code or other web objects such as unsigned ActiveX controls or applets. This is a privilege elevation attack targeted at zone-based web-browser security. In a zone-based model, pages belong to one of a set of zones corresponding to the level of privilege assigned to that page. Pages in an untrusted zone would have a lesser level of access to the system and/or be restricted in the types of executable content it was allowed to invoke. In a cross-zone scripting attack, a page that should be assigned to a less privileged zone is granted the privileges of a more trusted zone. This can be accomplished by exploiting bugs in the browser, exploiting incorrect configuration in the zone controls, through a cross-site scripting attack that causes the attackers' content to be treated as coming from a more trusted page, or by leveraging some piece of system functionality that is accessible from both the trusted and less trusted zone. This attack differs from "Restful Privilege Escalation" in that the latter correlates to the inadequate securing of RESTful access methods (such as HTTP DELETE) on the server, while cross-zone scripting attacks the concept of security zones as implemented by a browser.
Cross Site Scripting through Log Files
An attacker may leverage a system weakness where logs are susceptible to log injection to insert scripts into the system's logs. If these logs are later viewed by an administrator through a thin administrative interface and the log data is not properly HTML encoded before being written to the page, the attackers' scripts stored in the log will be executed in the administrative interface with potentially serious consequences. This attack pattern is really a combination of two other attack patterns: log injection and stored cross site scripting.
Command Line Execution through SQL Injection
An attacker uses standard SQL injection methods to inject data into the command line for execution. This could be done directly through misuse of directives such as MSSQL_xp_cmdshell or indirectly through injection of data into the database that would be interpreted as shell commands. Sometime later, an unscrupulous backend application (or could be part of the functionality of the same application) fetches the injected data stored in the database and uses this data as command line arguments without performing proper validation. The malicious data escapes that data plane by spawning new commands to be executed on the host.

Exploit-Db

description	Cisco IOS (using hping) Remote Denial of Service Exploit. CVE-2003-0567. Dos exploit for hardware platform
id	EDB-ID:62
last seen	2016-01-31
modified	2003-07-22
published	2003-07-22
reporter	zerash
source	https://www.exploit-db.com/download/62/
title	Cisco IOS using hping Remote Denial of Service Exploit

description	Cisco IOS IPv4 Packets Denial of Service Exploit. CVE-2003-0567. Dos exploit for hardware platform
id	EDB-ID:59
last seen	2016-01-31
modified	2003-07-18
published	2003-07-18
reporter	l0cK
source	https://www.exploit-db.com/download/59/
title	Cisco IOS IPv4 Packets Denial of Service Exploit

description	Cisco IOS IPv4 Packet Denial of Service Exploit (cisco-bug-44020.c). CVE-2003-0567. Dos exploit for hardware platform
id	EDB-ID:60
last seen	2016-01-31
modified	2003-07-21
published	2003-07-21
reporter	Martin Kluge
source	https://www.exploit-db.com/download/60/
title	Cisco IOS IPv4 Packet Denial of Service Exploit cisco-bug-44020.c

Nessus

NASL family	CISCO
NASL id	CISCO-SA-20030717-BLOCKED.NASL
description	Cisco routers and switches running Cisco IOS software and configured to process Internet Protocol version 4 (IPv4) packets are vulnerable to a Denial of Service (DoS) attack. Multiple IPv4 packets with specific protocol fields sent directly to the device may cause the input interface to stop processing traffic once the input queue is full. Traffic passing through the device cannot block the input queue. No authentication is required to process the inbound packet. Processing of IPv4 packets is enabled by default. Devices running only IP version 6 (IPv6) are not affected. Multiple valid workarounds are available in the form of best practices for situations where software upgrades are not currently feasible. Cisco has made software available, free of charge, to correct the problem.
last seen	2020-06-01
modified	2020-06-02
plugin id	48971
published	2010-09-01
reporter	This script is (C) 2010-2018 Tenable Network Security, Inc.
source	https://www.tenable.com/plugins/nessus/48971
title	Cisco IOS Interface Blocked by IPv4 Packets - Cisco Systems
code	# # (C) Tenable Network Security, Inc. # # Security advisory is (C) CISCO, Inc. # See https://www.cisco.com/en/US/products/products_security_advisory09186a00801a34c2.shtml if (NASL_LEVEL < 3000) exit(0); include("compat.inc"); if (description) { script_id(48971); script_version("1.18"); script_cve_id("CVE-2003-0567"); script_bugtraq_id(8211); script_xref(name:"CERT-CC", value:"411332"); script_xref(name:"CERT-CC", value:"CA-2003-15"); script_xref(name:"CERT-CC", value:"CA-2003-17"); script_xref(name:"CISCO-BUG-ID", value:"CSCdi22941"); script_xref(name:"CISCO-BUG-ID", value:"CSCdx02283"); script_xref(name:"CISCO-BUG-ID", value:"CSCdz71127"); script_xref(name:"CISCO-BUG-ID", value:"CSCea02355"); script_xref(name:"CISCO-SA", value:"cisco-sa-20030717-blocked"); script_xref(name:"EDB-ID", value:"59"); script_xref(name:"EDB-ID", value:"60"); script_xref(name:"EDB-ID", value:"62"); script_name(english:"Cisco IOS Interface Blocked by IPv4 Packets - Cisco Systems"); script_set_attribute(attribute:"synopsis", value: "The remote device is missing a vendor-supplied security patch." ); script_set_attribute(attribute:"description", value: 'Cisco routers and switches running Cisco IOS software and configured to process Internet Protocol version 4 (IPv4) packets are vulnerable to a Denial of Service (DoS) attack. Multiple IPv4 packets with specific protocol fields sent directly to the device may cause the input interface to stop processing traffic once the input queue is full. Traffic passing through the device cannot block the input queue. No authentication is required to process the inbound packet. Processing of IPv4 packets is enabled by default. Devices running only IP version 6 (IPv6) are not affected. Multiple valid workarounds are available in the form of best practices for situations where software upgrades are not currently feasible. Cisco has made software available, free of charge, to correct the problem. '); # https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20030717-blocked script_set_attribute(attribute:"see_also", value: "http://www.nessus.org/u?09cf3fb4"); # https://www.cisco.com/en/US/products/products_security_advisory09186a00801a34c2.shtml script_set_attribute(attribute:"see_also", value: "http://www.nessus.org/u?0cbca713"); script_set_attribute(attribute:"solution", value: "Apply the relevant patch referenced in Cisco Security Advisory cisco-sa-20030717-blocked." ); script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C"); script_set_attribute(attribute:"exploitability_ease", value:"No exploit is required"); script_set_attribute(attribute:"exploit_available", value:"true"); script_cwe_id(20); script_set_attribute(attribute:"plugin_type", value: "local"); script_set_attribute(attribute:"cpe", value: "cpe:/o:cisco:ios"); script_set_attribute(attribute:"vuln_publication_date", value: "2003/07/17"); script_set_attribute(attribute:"patch_publication_date", value: "2003/07/17"); script_set_attribute(attribute:"plugin_publication_date", value: "2010/09/01"); script_cvs_date("Date: 2018/11/15 20:50:20"); script_end_attributes(); script_summary(english:"Uses SNMP to determine if a flaw is present"); script_category(ACT_GATHER_INFO); script_copyright(english:"This script is (C) 2010-2018 Tenable Network Security, Inc."); script_family(english:"CISCO"); script_dependencie("cisco_ios_version.nasl"); script_require_keys("Host/Cisco/IOS/Version"); exit(0); } include("cisco_func.inc"); # version = get_kb_item_or_exit("Host/Cisco/IOS/Version"); # Affected: 10.x if (version =~ "^10\.") { security_hole(port:0, extra: '\nNo fix is available for 10.x releases. Upgrade to a supported version\n'); exit(0); } # Affected: 11.0 if (deprecated_version(version, "11.0")) { security_hole(port:0, extra: '\nNo fix is available for 11.0 releases. Upgrade to a supported version\n'); exit(0); } # Affected: 11.1 if (check_release(version: version, patched: make_list("11.1(24c)") )) { security_hole(port:0, extra: '\nUpdate to ' + patch_update + ' or later\n'); exit(0); } # Affected: 11.1AA if (check_release(version: version, patched: make_list("11.1(20)AA5") )) { security_hole(port:0, extra: '\nUpdate to ' + patch_update + ' or later\n'); exit(0); } # Affected: 11.1CA if (check_release(version: version, patched: make_list("11.1(36)CA4") )) { security_hole(port:0, extra: '\nUpdate to ' + patch_update + ' or later\n'); exit(0); } # Affected: 11.1CC if (check_release(version: version, patched: make_list("11.1(36)CC7") )) { security_hole(port:0, extra: '\nUpdate to ' + patch_update + ' or later\n'); exit(0); } # Affected: 11.2 if (check_release(version: version, patched: make_list("11.2(15b)", "11.2(26e)") )) { security_hole(port:0, extra: '\nUpdate to ' + patch_update + ' or later\n'); exit(0); } # Affected: 11.2P if (check_release(version: version, patched: make_list("11.2(17)P1", "11.2(20)P1", "11.2(26)P5") )) { security_hole(port:0, extra: '\nUpdate to ' + patch_update + ' or later\n'); exit(0); } # Affected: 11.2SA if (check_release(version: version, patched: make_list("11.2(8.11)SA6") )) { security_hole(port:0, extra: '\nUpdate to ' + patch_update + ' or later\n'); exit(0); } # Affected: 11.3 if (check_release(version: version, patched: make_list("11.3(11d)") )) { security_hole(port:0, extra: '\nUpdate to ' + patch_update + ' or later\n'); exit(0); } # Affected: 11.3T if (check_release(version: version, patched: make_list("11.3(11b)T3") )) { security_hole(port:0, extra: '\nUpdate to ' + patch_update + ' or later\n'); exit(0); } # Affected: 12.0 if (check_release(version: version, patched: make_list("12.0(15b)", "12.0(16b)", "12.0(19b)", "12.0(8b)", "12.0(26)"))) { security_hole(port:0, extra: '\nUpdate to ' + patch_update + ' or later\n'); exit(0); } if (deprecated_version(version, "12.0DA")) { security_hole(port:0, extra: '\nUpdate to 12.2(10)DA2 / 12.2(12)DA3 or later\n'); exit(0); } if (deprecated_version(version, "12.0DB")) { security_hole(port:0, extra: '\nUpdate to 12.3(1a) or later\n'); exit(0); } if (deprecated_version(version, "12.0DC")) { security_hole(port:0, extra: '\nUpdate to 12.3(1a) or later\n'); exit(0); } # Affected: 12.0S if (check_release(version: version, patched: make_list("12.0(10)S3b", "12.0(10)S8", "12.0(12)S4", "12.0(13)S8", "12.0(14)S8", "12.0(15)S7", "12.0(16)S10", "12.0(16)S8a", "12.0(17)S7", "12.0(18)S5a", "12.0(18)S7", "12.0(19)S2a", "12.0(19)S4", "12.0(21)S4a", "12.0(21)S5a", "12.0(21)S7", "12.0(22)S5", "12.0(23)S3", "12.0(24)S2", "12.0(25)S"))) { security_hole(port:0, extra: '\nUpdate to ' + patch_update + ' or later\n'); exit(0); } if (deprecated_version(version, "12.0SC")) { security_hole(port:0, extra: '\nUpdate to 12.1(19)EC or later\n'); exit(0); } if (check_release(version: version, patched: make_list("12.0(17)SL9") )) { security_hole(port:0, extra: '\nUpdate to ' + patch_update + ' or later\n'); exit(0); } if (check_release(version: version, patched: make_list("12.0(21)SP4") )) { security_hole(port:0, extra: '\nMigrate to 12.0(22)S5 or update to ' + patch_update + ' or later\n'); exit(0); } # Affected: 12.0ST if (check_release(version: version, patched: make_list("12.0(17)ST8", "12.0(19)ST6", "12.0(20)ST6", "12.0(21)ST3a", "12.0(21)ST7") )) { security_hole(port:0, extra: '\nUpdate to ' + patch_update + ' or later\n'); exit(0); } if (version == '12.0(21)SX') { security_hole(port:0, extra: '\nUpdate to 12.0(22)S5 or later\n'); exit(0); } if (version == '12.0(22)SX') { security_hole(port:0, extra: '\nNo fixes are available for 12.0(22)SX. Upgrade to a non-vulnerable version\n'); exit(0); } if (deprecated_version(version, "12.0SY")) { security_hole(port:0, extra: '\nUpdate to 12.0(23)S3 or later\n'); exit(0); } if (deprecated_version(version, "12.0SZ")) { security_hole(port:0, extra: '\nUpdate to 12.0(23)S3 or later\n'); exit(0); } # Affected: 12.0T if (check_release(version: version, patched: make_list("12.0(7)T3") )) { security_hole(port:0, extra: '\nUpdate to ' + patch_update + ' or later\n'); exit(0); } # Affected: 12.0W5 if ( "W5" >< version && # avoid flagging versions like W4 check_release(version: version, patched: make_list("12.0(24)W5(26c)", "12.0(26)W5(28)", "12.0(25)W5(27)"))) { security_hole(port:0, extra: '\nUpdate to ' + patch_update + ' or later\n'); exit(0); } # Affected: 12.0WC if (check_release(version: version, patched: make_list("12.0(5)WC8") )) { security_hole(port:0, extra: '\nUpdate to ' + patch_update + ' or later\n'); exit(0); } if (deprecated_version(version, "12.0WT")) { security_hole(port:0, extra: '\nNo fixes are available for 12.0WT releases. Upgrade to a supported version\n'); exit(0); } # All 12.0X(any letter) releases have migrated to either 12.0T or 12.1 unless otherwise # documented in the X release technical notes pertaining to the specific release. # Please check migration paths for all 12.0X releases. if (version =~ "^12\.0.+X[A-Z]") { security_hole(port:0, extra: '\n12.0X releases are no longer supported unless otherwise noted.' + '\nCheck the migration paths for all 12.0X releases\n'); exit(0); } # Affected: 12.1 if (check_release(version: version, patched: make_list("12.1(13a)", "12.1(17a)", "12.1(4b)", "12.1(6b)", "12.1(18.4)", "12.1(19)"))) { security_hole(port:0, extra: '\nUpdate to ' + patch_update + ' or later\n'); exit(0); } if (deprecated_version(version, "12.1AA")) { security_hole(port:0, extra: '\nUpdate to 12.2(17) or later\n'); exit(0); } # Affected: 12.1AX if (deprecated_version(version, "12.1AX")) { security_hole(port:0, extra: '\nUpdate to 12.1(14)EA1 or later\n'); exit(0); } # Affected: 12.1AY if (check_release(version: version, patched: make_list("12.1(13)AY"))) { security_hole(port:0, extra: '\nUpdate to ' + patch_update + ' or later\n'); exit(0); } if (deprecated_version(version, "12.1DA")) { security_hole(port:0, extra: '\nUpdate to 12.2(10)DA2 / 12.2(12)DA3 or later\n'); exit(0); } # Affected: 12.1DB if (check_release(version: version, patched: make_list("12.1(5)DB2"))) { security_hole(port:0, extra: '\nUpdate to ' + patch_update + ' or later\n'); exit(0); } # Affected: 12.1DC if (check_release(version: version, patched: make_list("12.1(5)DC3"))) { security_hole(port:0, extra: '\nUpdate to ' + patch_update + ' or later\n'); exit(0); } # Affected: 12.1E if (check_release(version: version, patched: make_list("12.1(6)E12", "12.1(7a)E1a", "12.1(8b)E14", "12.1(11b)E12", "12.1(12c)E7", "12.1(13)E7", "12.1(14)E4", "12.1(10)E6a", "12.1(11b)E0a", "12.1(7)E0a", "12.1(19)E"))) { security_hole(port:0, extra: '\nUpdate to ' + patch_update + ' or later\n'); exit(0); } if ( version == "12.1(4)EA" \|\| version == "12.1(6)EA" \|\| version == "12.1(8)EA" \|\| version == "12.1(9)EA" \|\| version == "12.1(11)EA" \|\| version == "12.1(12c)EA" \|\| version == "12.1(13)EA" ) { security_hole(port:0, extra: '\nUpdate to 12.1(13)EA1c or later\n'); exit(0); } # Affected: 12.1EB if (check_release(version: version, patched: make_list("12.1(14)EB"))) { security_hole(port:0, extra: '\nUpdate to ' + patch_update + ' or later\n'); exit(0); } # Affected: 12.1EC if (check_release(version: version, patched: make_list("12.1(13)EC4", "12.1(19)EC"))) { security_hole(port:0, extra: '\nUpdate to ' + patch_update + ' or later\n'); exit(0); } # Affected: 12.1EV if (check_release(version: version, patched: make_list("12.1(12c)EV2") )) { security_hole(port:0, extra: '\nUpdate to ' + patch_update + ' or later\n'); exit(0); } # Affected: 12.1EW if (check_release(version: version, patched: make_list("12.1(12c)EW2", "12.1(13)EW2", "12.1(19)EW"))) { security_hole(port:0, extra: '\nUpdate to ' + patch_update + ' or later\n'); exit(0); } # 12.1(1)EX to 12.1(8b)EX5 Migrate to 12.1(8b)E14 if ( check_release(version: version, patched: make_list("12.1(8b)EX5")) \|\| version == '12.1(8b)EX5' ) { security_hole(port:0, extra: '\nUpdate to ' + patch_update + ' or later\n'); exit(0); } # 12.1(9)EX to current - To be determined (this should cover everything 12.1EX not caught by the check above) if (deprecated_version(version, "12.1EX")) { security_hole(port:0, extra: '\nNo fixes are available for releases 12.1(9)EX and later. Upgrade to a supported version\n'); exit(0); } # Affected: 12.1EY if (deprecated_version(version, "12.1EY")) { security_hole(port:0, extra: '\nUpdate to 12.1(14)E4 / 12.1(14)EB (LS1010 ONLY) or later\n'); exit(0); } # Affected: 12.1YJ if (deprecated_version(version, "12.1YJ")) { security_hole(port:0, extra: '\nUpdate to 12.1(14)EA1 or later\n'); exit(0); } # Affected: 12.1T if (check_release(version: version, patched: make_list("12.1(5)T15", "12.1(5)T8c") )) { security_hole(port:0, extra: '\nUpdate to ' + patch_update + ' or later\n'); exit(0); } if (deprecated_version(version, "12.1XA")) { security_hole(port:0, extra: '\nUpdate to 12.2(11)T9 or later\n'); exit(0); } if (deprecated_version(version, "12.1XC", "12.1XD", "12.1XH")) { security_hole(port:0, extra: '\nUpdate to 12.2(17) or later\n'); exit(0); } # Affected: 12.1XI if (check_release(version: version, patched: make_list("12.1(3a)XI9") )) { security_hole(port:0, extra: '\nUpdate to ' + patch_update + ' or later\n'); exit(0); } if (deprecated_version(version, "12.1XB", "12.1XF", "12.1XG", "12.1XJ", "12.1XL", "12.1XP", "12.1XR", "12.1XT", "12.1YB", "12.1YC", "12.1YD", "12.1YH")) { security_hole(port:0, extra: '\nUpdate to 12.2(15)T5 or later\n'); exit(0); } if (deprecated_version(version, "12.1XM", "12.1XQ", "12.1XV")) { security_hole(port:0, extra: '\nUpdate to 12.2(2)XB11 or later\n'); exit(0); } if (deprecated_version(version, "12.1XU")) { security_hole(port:0, extra: '\nUpdate to 12.2(4)T6 or later\n'); exit(0); } if (deprecated_version(version, "12.1YE", "12.1YF", "12.1YI")) { security_hole(port:0, extra: '\nUpdate to 12.2(2)YC or later\n'); exit(0); } # Affected: 12.2 if (check_release(version: version, patched: make_list("12.2(10d)", "12.2(12e)", "12.2(13b)M2", "12.2(16a)", "12.2(6j)", "12.2(7g)", "12.2(17)"))) { security_hole(port:0, extra: '\nUpdate to ' + patch_update + ' or later\n'); exit(0); } # Affected: 12.2B # 12.2(2)B-12.2(4)B7 if (check_release(version: version, patched: make_list("12.2(4)B7a"), oldest:"12.2(2)B")) { security_hole(port:0, extra: '\nUpdate to ' + patch_update + ' or later\n'); exit(0); } # 12.2(4)B8-12.2(16)B if (check_release(version: version, patched: make_list("12.2(16)B1"), oldest:"12.2(4)B8")) { security_hole(port:0, extra: '\nUpdate to ' + patch_update + ' or later\n'); exit(0); } # Affected: 12.2BC if (check_release(version: version, patched: make_list("12.2(11)BC3c", "12.2(15)BC1") )) { security_hole(port:0, extra: '\nUpdate to ' + patch_update + ' or later\n'); exit(0); } if (deprecated_version(version, "12.2BW")) { security_hole(port:0, extra: '\nUpdate to 12.3(1a) or later\n'); exit(0); } # Affected: 12.2BX if (check_release(version: version, patched: make_list("12.2(16)BX"))) { security_hole(port:0, extra: '\nUpdate to ' + patch_update + ' or later\n'); exit(0); } # Affected: 12.2BZ if (check_release(version: version, patched: make_list("12.2(15)BZ1"))) { security_hole(port:0, extra: '\nUpdate to ' + patch_update + ' or later\n'); exit(0); } if (deprecated_version(version, "12.2CX")) { security_hole(port:0, extra: '\nUpdate to 12.2(15)BC1 or later\n'); exit(0); } if (deprecated_version(version, "12.2CY")) { security_hole(port:0, extra: '\nUpdate to 12.2(15)BC1 or later\n'); exit(0); } # Affected: 12.2DA if (check_release(version: version, patched: make_list("12.2(10)DA2", "12.2(12)DA3") )) { security_hole(port:0, extra: '\nUpdate to ' + patch_update + ' or later\n'); exit(0); } if (deprecated_version(version, "12.2DD")) { security_hole(port:0, extra: '\nUpdate to 12.3(1a) or later\n'); exit(0); } if (deprecated_version(version, "12.2DX")) { security_hole(port:0, extra: '\nUpdate to 12.3(1a) or later\n'); exit(0); } # Affected: 12.2JA if (check_release(version: version, patched: make_list("12.2(11)JA"))) { security_hole(port:0, extra: '\nUpdate to ' + patch_update + ' or later\n'); exit(0); } # Affected: 12.2MB if (check_release(version: version, patched: make_list("12.2(4)MB12") )) { security_hole(port:0, extra: '\nUpdate to ' + patch_update + ' or later\n'); exit(0); } # Affected: 12.2MC if (check_release(version: version, patched: make_list("12.2(15)MC1") )) { security_hole(port:0, extra: '\nUpdate to ' + patch_update + ' or later\n'); exit(0); } # Affected: 12.2MX if (deprecated_version(version, "12.2MX")) { security_hole(port:0, extra: '\nUpdate to 12.2(8)YD or later\n'); exit(0); } # Affected: 12.2S if (check_release(version: version, patched: make_list("12.2(14)S1", "12.2(16.5)S") )) { security_hole(port:0, extra: '\nUpdate to ' + patch_update + ' or later\n'); exit(0); } # Affected: 12.2SX if (check_release(version: version, patched: make_list("12.2(14)SX1") )) { security_hole(port:0, extra: '\nUpdate to ' + patch_update + ' or later\n'); exit(0); } # Affected: 12.2SY if (check_release(version: version, patched: make_list("12.2(14)SY1") )) { security_hole(port:0, extra: '\nUpdate to ' + patch_update + ' or later\n'); exit(0); } # Affected: 12.2SZ if (check_release(version: version, patched: make_list("12.2(14)SZ2") )) { security_hole(port:0, extra: '\nUpdate to ' + patch_update + ' or later\n'); exit(0); } # Affected: 12.2T if (check_release(version: version, patched: make_list("12.2(11)T9", "12.2(13)T1a", "12.2(13)T5", "12.2(15)T5", "12.2(4)T6", "12.2(8)T0c", "12.2(8)T10", "12.2(16.5)T"))) { security_hole(port:0, extra: '\nUpdate to ' + patch_update + ' or later\n'); exit(0); } if (deprecated_version(version, "12.2XA")) { security_hole(port:0, extra: '\nUpdate to 12.2(11)T9 or later\n'); exit(0); } if (deprecated_version(version, "12.2XM")) { security_hole(port:0, extra: '\nUpdate to 12.2(4)YA6 or later\n'); exit(0); } # Affected: 12.2XS if (check_release(version: version, patched: make_list("12.2(1)XS1a"))) { security_hole(port:0, extra: '\nUpdate to ' + patch_update + ' or later\n'); exit(0); } if (deprecated_version(version, "12.2XD", "12.2XE", "12.2XH", "12.2XI", "12.2XJ", "12.2XK", "12.2XL", "12.2XQ", "12.2XU", "12.2XW", "12.2YB", "12.2YC", "12.2YF", "12.2YG", "12.2YH", "12.2YJ", "12.2YT")) { security_hole(port:0, extra: '\nUpdate to 12.2(15)T5 or later\n'); exit(0); } # Affected: 12.2YA if (check_release(version: version, patched: make_list("12.2(4)YA6") )) { security_hole(port:0, extra: '\nUpdate to ' + patch_update + ' or later\n'); exit(0); } if (deprecated_version(version, "12.2YN")) { security_hole(port:0, extra: '\nUpdate to 12.2(13)ZH2 or later\n'); exit(0); } if (deprecated_version(version, "12.2YO")) { security_hole(port:0, extra: '\nUpdate to 12.2(14)SY1 or later\n'); exit(0); } # Affected: 12.2XB if (check_release(version: version, patched: make_list("12.2(2)XB11") )) { security_hole(port:0, extra: '\nUpdate to ' + patch_update + ' or later\n'); exit(0); } if (deprecated_version(version, "12.2XC")) { security_hole(port:0, extra: '\nUpdate to 12.2(8)ZB7 or later\n'); exit(0); } if (deprecated_version(version, "12.2XF")) { security_hole(port:0, extra: '\nUpdate to 12.2(15)BC1 or later\n'); exit(0); } if (deprecated_version(version, "12.2XG")) { security_hole(port:0, extra: '\nUpdate to 12.2(8)T10 or later\n'); exit(0); } if (deprecated_version(version, "12.2XN", "12.2XT")) { security_hole(port:0, extra: '\nUpdate to 12.2(11)T9 or later\n'); exit(0); } if (deprecated_version(version, "12.2YD")) { security_hole(port:0, extra: '\nUpdate to 12.2(8)YY or later\n'); exit(0); } if (deprecated_version(version, "12.2YK")) { security_hole(port:0, extra: '\nUpdate to 12.2(13)ZC or later\n'); exit(0); } if (deprecated_version(version, "12.2YL", "12.2YM", "12.2YU", "12.2YV")) { security_hole(port:0, extra: '\nUpdate to 12.2(13)ZH2 or later\n'); exit(0); } # Affected: 12.2YP if (check_release(version: version, patched: make_list("12.2(11)YP1") )) { security_hole(port:0, extra: '\nUpdate to ' + patch_update + ' or later\n'); exit(0); } if (deprecated_version(version, "12.2YQ", "12.2YR")) { security_hole(port:0, extra: '\nUpdate to 12.2(15)ZL or later\n'); exit(0); } # Affected: 12.2YS if (check_release(version: version, patched: make_list("12.2(15)YS") )) { # the advisory says "12.2(15)YS/1.2(1)", assuming it's a typo security_hole(port:0, extra: '\nUpdate to ' + patch_update + ' or later\n'); exit(0); } # Affected: 12.2YW if (check_release(version: version, patched: make_list("12.2(8)YW2") )) { security_hole(port:0, extra: '\nUpdate to ' + patch_update + ' or later\n'); exit(0); } # Affected: 12.2YX if (check_release(version: version, patched: make_list("12.2(11)YX1") )) { security_hole(port:0, extra: '\nUpdate to ' + patch_update + ' or later\n'); exit(0); } # Affected: 12.2YY if (check_release(version: version, patched: make_list("12.2(8)YY3") )) { security_hole(port:0, extra: '\nUpdate to ' + patch_update + ' or later\n'); exit(0); } # Affected: 12.2YZ if (check_release(version: version, patched: make_list("12.2(11)YZ2") )) { security_hole(port:0, extra: '\nUpdate to ' + patch_update + ' or later\n'); exit(0); } # Affected: 12.2ZA if (check_release(version: version, patched: make_list("12.2(14)ZA2"))) { security_hole(port:0, extra: '\nUpdate to ' + patch_update + ' or later\n'); exit(0); } # Affected: 12.2ZB if (check_release(version: version, patched: make_list("12.2(8)ZB7") )) { security_hole(port:0, extra: '\nUpdate to ' + patch_update + ' or later\n'); exit(0); } # Affected: 12.2ZC if (check_release(version: version, patched: make_list("12.2(13)ZC"))) { security_hole(port:0, extra: '\nUpdate to ' + patch_update + ' or later\n'); exit(0); } if (deprecated_version(version, "12.2ZD")) { security_hole(port:0, extra: '\nNo fix is available for 12.2ZD releases. Update to a supported release\n'); exit(0); } # Affected: 12.2ZE if (deprecated_version(version, "12.2ZE")) { security_hole(port:0, extra: '\nUpdate to 12.3(1a) or later\n'); exit(0); } # Affected: 12.2ZF if (check_release(version: version, patched: make_list("12.2(13)ZF1") )) { security_hole(port:0, extra: '\nUpdate to ' + patch_update + ' or later\n'); exit(0); } if (deprecated_version(version, "12.2ZG")) { security_hole(port:0, extra: '\nUpdate to 12.2(13)ZH2 or later\n'); exit(0); } # Affected: 12.2ZH if (check_release(version: version, patched: make_list("12.2(13)ZH2") )) { security_hole(port:0, extra: '\nUpdate to ' + patch_update + ' or later\n'); exit(0); } # Affected: 12.2ZJ if (check_release(version: version, patched: make_list("12.2(15)ZJ1") )) { security_hole(port:0, extra: '\nUpdate to ' + patch_update + ' or later\n'); exit(0); } exit(0, "The remote host is not affected");

NASL family	CISCO
NASL id	CISCO_IPV4_DOS.NASL
description	According to its version number, the remote router or switch is running a vulnerable version of Cisco IOS. Sending a specific sequence of IPv4 packets can cause the input interface to stop accepting traffic. Note that this vulnerability does not affect devices that only use IPv6.
last seen	2020-03-26
modified	2003-07-17
plugin id	11791
published	2003-07-17
reporter	This script is (C) 2003-2020 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/11791
title	Cisco IOS Malformed IPv4 Packet Remote DoS
code	# # (C) Tenable Network Security, Inc. # include("compat.inc"); if (description) { script_id(11791); script_version("1.29"); script_set_attribute(attribute:"plugin_modification_date", value:"2020/03/25"); script_cve_id("CVE-2003-0567"); script_bugtraq_id(8211); script_xref(name:"CERT-CC", value:"CA-2003-15"); script_name(english:"Cisco IOS Malformed IPv4 Packet Remote DoS"); script_summary(english:"Uses SNMP to determine if a flaw is present"); script_set_attribute( attribute:"synopsis", value:"The remote network device has a denial of service vulnerability." ); script_set_attribute( attribute:"description", value: "According to its version number, the remote router or switch is running a vulnerable version of Cisco IOS. Sending a specific sequence of IPv4 packets can cause the input interface to stop accepting traffic. Note that this vulnerability does not affect devices that only use IPv6." ); # https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20030717-blocked script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?09cf3fb4"); script_set_attribute(attribute:"solution", value:"Upgrade to the version of IOS referenced in the vendor's advisory."); script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C"); script_set_cvss_temporal_vector("CVSS2#E:POC/RL:OF/RC:C"); script_set_attribute(attribute:"cvss_score_source", value:"CVE-2003-0567"); script_set_attribute(attribute:"exploitability_ease", value:"Exploits are available"); script_set_attribute(attribute:"exploit_available", value:"true"); script_cwe_id(20); script_set_attribute(attribute:"vuln_publication_date", value:"2003/07/18"); script_set_attribute(attribute:"patch_publication_date", value:"2003/07/18"); script_set_attribute(attribute:"plugin_publication_date", value:"2003/07/17"); script_set_attribute(attribute:"plugin_type", value:"local"); script_set_attribute(attribute:"cpe",value:"cpe:/o:cisco:ios"); script_end_attributes(); script_category(ACT_GATHER_INFO); script_family(english:"CISCO"); script_copyright(english:"This script is (C) 2003-2020 and is owned by Tenable, Inc. or an Affiliate thereof."); script_dependencies("snmp_sysDesc.nasl", "snmp_cisco_type.nasl"); script_require_keys("SNMP/community", "SNMP/sysDesc"); exit(0); } # The code starts here ok=0; os = get_kb_item("SNMP/sysDesc"); if(!os)exit(0); # Check for the required operating system... #---------------------------------------------------------------- # Is this IOS ? if(!egrep(pattern:".(Internetwork Operating\|IOS).", string:os))exit(0); # 11.1CA if(egrep(string:os, pattern:"(^\|\s+)((11\.1\(([0-9]\|[1-2][0-9]\|3[0-5])\)\|11\.1)CA[0-9]\|11\.1\(36\)CA[0-3]),"))ok=1; # 11.2 if(egrep(string:os, pattern:"(^\|\s+)(11\.2\(([0-9]\|[1-1][0-9]\|2[0-5])\)\|11\.2),"))ok=1; # 11.2P if(egrep(string:os, pattern:"(^\|\s+)((11\.2\(([0-9]\|[1-1][0-9]\|2[0-5])\)\|11\.2)P[0-9]\|11\.2\(26\)P[0-4]),"))ok=1; # 11.3 if(egrep(string:os, pattern:"(^\|\s+)(11\.3\([0-9]\)\|11\.3),"))ok=1; # 11.3T if(egrep(string:os, pattern:"(^\|\s+)(11\.3\([0-9]\)\|11\.3)T[0-9],"))ok=1; # 12.0 if(egrep(string:os, pattern:"(^\|\s+)(12\.0\(([0-9]\|[1-1][0-9]\|2[0-5])\)\|12\.0),"))ok=1; # 12.0DA if(egrep(string:os, pattern:"(^\|\s+)(12\.0\([0-9]\)\|12\.0)DA[0-9],"))ok=1; # 12.0DB if(egrep(string:os, pattern:"(^\|\s+)(12\.0\([0-9]\)\|12\.0)DB[0-9],"))ok=1; # 12.0DC if(egrep(string:os, pattern:"(^\|\s+)(12\.0\([0-9]\)\|12\.0)DC[0-9],"))ok=1; # 12.0S if(egrep(string:os, pattern:"(^\|\s+)((12\.0\(([0-9]\|[1-1][0-9]\|2[0-3])\)\|12\.0)S[0-9]\|12\.0\(24\)S[0-1]),"))ok=1; # 12.0SC if(egrep(string:os, pattern:"(^\|\s+)(12\.0\([0-9]\)\|12\.0)SC[0-9],"))ok=1; # 12.0SL if(egrep(string:os, pattern:"(^\|\s+)(12\.0\([0-9]\)\|12\.0)SL[0-9],"))ok=1; # 12.0SP if(egrep(string:os, pattern:"(^\|\s+)(12\.0\([0-9]\)\|12\.0)SP[0-9],"))ok=1; # 12.0ST if(egrep(string:os, pattern:"(^\|\s+)((12\.0\(([0-9]\|[1-1][0-9]\|2[0-0])\)\|12\.0)ST[0-9]\|12\.0\(21\)ST[0-6]),"))ok=1; # 12.0SX if(egrep(string:os, pattern:"(^\|\s+)(12\.0\([0-9]\)\|12\.0)SX[0-9],"))ok=1; # 12.0SY if(egrep(string:os, pattern:"(^\|\s+)(12\.0\([0-9]\)\|12\.0)SY[0-9],"))ok=1; # 12.0T if(egrep(string:os, pattern:"(^\|\s+)((12\.0\([0-6]\)\|12\.0)T[0-9]\|12\.0\(7\)T[0-2]),"))ok=1; # 12.0W5 if(egrep(string:os, pattern:"(^\|\s+)(12\.0\([0-9]\)\|12\.0)W5[0-9],"))ok=1; # 12.0WC if(egrep(string:os, pattern:"(^\|\s+)((12\.0\([0-4]\)\|12\.0)WC[0-9]\|12\.0\(5\)WC[0-7]),"))ok=1; # 12.0WT if(egrep(string:os, pattern:"(^\|\s+)(12\.0\([0-9]\)\|12\.0)WT[0-9],"))ok=1; # 12.0X if(egrep(string:os, pattern:"(^\|\s+)(12\.0\([0-9]\)\|12\.0)X[0-9],"))ok=1; # 12.1 if(egrep(string:os, pattern:"(^\|\s+)(12\.1\(([0-9]\|1[0-8])\)\|12\.1),"))ok=1; # 12.1AA if(egrep(string:os, pattern:"(^\|\s+)(12\.1\([0-9]\)\|12\.1)AA[0-9],"))ok=1; # 12.1AX if(egrep(string:os, pattern:"(^\|\s+)(12\.1\([0-9]\)\|12\.1)AX[0-9],"))ok=1; # 12.1AY if(egrep(string:os, pattern:"(^\|\s+)(12\.1\(([0-9]\|1[0-2])\)\|12\.1)AY[0-9],"))ok=1; # 12.1DA if(egrep(string:os, pattern:"(^\|\s+)(12\.1\([0-9]\)\|12\.1)DA[0-9],"))ok=1; # 12.1DB if(egrep(string:os, pattern:"(^\|\s+)(12\.1\([0-9]\)\|12\.1)DB[0-9],"))ok=1; # 12.1DC if(egrep(string:os, pattern:"(^\|\s+)(12\.1\([0-9]\)\|12\.1)DC[0-9],"))ok=1; # 12.1E if(egrep(string:os, pattern:"(^\|\s+)(12\.1\(([0-9]\|1[0-8])\)\|12\.1)E[0-9],"))ok=1; # 12.1EA if(egrep(string:os, pattern:"(^\|\s+)(12\.1\(([0-9]\|1[0-2])\)\|12\.1)EA[0-9],"))ok=1; # 12.1EB if(egrep(string:os, pattern:"(^\|\s+)(12\.1\(([0-9]\|1[0-3])\)\|12\.1)EB[0-9],"))ok=1; # 12.1EC if(egrep(string:os, pattern:"(^\|\s+)(12\.1\(([0-9]\|1[0-8])\)\|12\.1)EC[0-9],"))ok=1; # 12.1EV if(egrep(string:os, pattern:"(^\|\s+)(12\.1\(([0-9]\|1[0-1])\)\|12\.1)EV[0-9],"))ok=1; # 12.1EW if(egrep(string:os, pattern:"(^\|\s+)(12\.1\(([0-9]\|1[0-8])\)\|12\.1)EW[0-9],"))ok=1; # 12.1EX if(egrep(string:os, pattern:"(^\|\s+)((12\.1\(([0-9]\|1[0-2])\)\|12\.1)EX[0-9]\|12\.1\(13\)EX[0-1]),"))ok=1; # 12.1EY if(egrep(string:os, pattern:"(^\|\s+)((12\.1\(([0-9]\|1[0-3])\)\|12\.1)EY[0-9]\|12\.1\(14\)EY[0-3]),"))ok=1; # 12.1YJ if(egrep(string:os, pattern:"(^\|\s+)((12\.1\(([0-9]\|1[0-3])\)\|12\.1)YJ[0-9]\|12\.1\(14\)YJ[0-0]),"))ok=1; # 12.1T if(egrep(string:os, pattern:"(^\|\s+)((12\.1\([0-4]\)\|12\.1)T[0-9]\|12\.1\(5\)T([0-9]\|1[0-4])),"))ok=1; # 12.1X if(egrep(string:os, pattern:"(^\|\s+)(12\.1\([0-9]\)\|12\.1)X[0-9],"))ok=1; # 12.1XA if(egrep(string:os, pattern:"(^\|\s+)(12\.1\([0-9]\)\|12\.1)XA[0-9],"))ok=1; # 12.1XC if(egrep(string:os, pattern:"(^\|\s+)(12\.1\([0-9]\)\|12\.1)XC[0-9],"))ok=1; # 12.1XD if(egrep(string:os, pattern:"(^\|\s+)(12\.1\([0-9]\)\|12\.1)XD[0-9],"))ok=1; # 12.1XH if(egrep(string:os, pattern:"(^\|\s+)(12\.1\([0-9]\)\|12\.1)XH[0-9],"))ok=1; # 12.1XI if(egrep(string:os, pattern:"(^\|\s+)(12\.1\([0-9]\)\|12\.1)XI[0-9],"))ok=1; # 12.1XB if(egrep(string:os, pattern:"(^\|\s+)(12\.1\([0-9]\)\|12\.1)XB[0-9],"))ok=1; # 12.1XF if(egrep(string:os, pattern:"(^\|\s+)(12\.1\([0-9]\)\|12\.1)XF[0-9],"))ok=1; # 12.1XG if(egrep(string:os, pattern:"(^\|\s+)(12\.1\([0-9]\)\|12\.1)XG[0-9],"))ok=1; # 12.1XJ if(egrep(string:os, pattern:"(^\|\s+)(12\.1\([0-9]\)\|12\.1)XJ[0-9],"))ok=1; # 12.1XL if(egrep(string:os, pattern:"(^\|\s+)(12\.1\([0-9]\)\|12\.1)XL[0-9],"))ok=1; # 12.1XP if(egrep(string:os, pattern:"(^\|\s+)(12\.1\([0-9]\)\|12\.1)XP[0-9],"))ok=1; # 12.1XR if(egrep(string:os, pattern:"(^\|\s+)(12\.1\([0-9]\)\|12\.1)XR[0-9],"))ok=1; # 12.1XT if(egrep(string:os, pattern:"(^\|\s+)(12\.1\([0-9]\)\|12\.1)XT[0-9],"))ok=1; # 12.1YB if(egrep(string:os, pattern:"(^\|\s+)(12\.1\([0-9]\)\|12\.1)YB[0-9],"))ok=1; # 12.1YC if(egrep(string:os, pattern:"(^\|\s+)(12\.1\([0-9]\)\|12\.1)YC[0-9],"))ok=1; # 12.1YD if(egrep(string:os, pattern:"(^\|\s+)(12\.1\([0-9]\)\|12\.1)YD[0-9],"))ok=1; # 12.1YH if(egrep(string:os, pattern:"(^\|\s+)(12\.1\([0-9]\)\|12\.1)YH[0-9],"))ok=1; # 12.1XM if(egrep(string:os, pattern:"(^\|\s+)(12\.1\([0-9]\)\|12\.1)XM[0-9],"))ok=1; # 12.1XQ if(egrep(string:os, pattern:"(^\|\s+)(12\.1\([0-9]\)\|12\.1)XQ[0-9],"))ok=1; # 12.1XV if(egrep(string:os, pattern:"(^\|\s+)(12\.1\([0-9]\)\|12\.1)XV[0-9],"))ok=1; # 12.1XU if(egrep(string:os, pattern:"(^\|\s+)(12\.1\([0-9]\)\|12\.1)XU[0-9],"))ok=1; # 12.1YE if(egrep(string:os, pattern:"(^\|\s+)(12\.1\([0-9]\)\|12\.1)YE[0-9],"))ok=1; # 12.1YF if(egrep(string:os, pattern:"(^\|\s+)(12\.1\([0-9]\)\|12\.1)YF[0-9],"))ok=1; # 12.1YI if(egrep(string:os, pattern:"(^\|\s+)(12\.1\([0-9]\)\|12\.1)YI[0-9],"))ok=1; # 12.2 if(egrep(string:os, pattern:"(^\|\s+)(12\.2\(([0-9]\|1[0-6])\)\|12\.2),"))ok=1; # 12.2B if(egrep(string:os, pattern:"(^\|\s+)((12\.2\(([0-9]\|1[0-5])\)\|12\.2)B[0-9]\|12\.2\(16\)B[0-0]),"))ok=1; # 12.2BC if(egrep(string:os, pattern:"(^\|\s+)((12\.2\(([0-9]\|1[0-4])\)\|12\.2)BC[0-9]\|12\.2\(15\)BC[0-0]),"))ok=1; # 12.2BW if(egrep(string:os, pattern:"(^\|\s+)(12\.2\([0-9]\)\|12\.2)BW[0-9],"))ok=1; # 12.2BX if(egrep(string:os, pattern:"(^\|\s+)(12\.2\(([0-9]\|1[0-5])\)\|12\.2)BX[0-9],"))ok=1; # 12.2BZ if(egrep(string:os, pattern:"(^\|\s+)(12\.2\([0-9]\)\|12\.2)BZ[0-9],"))ok=1; # 12.2CX if(egrep(string:os, pattern:"(^\|\s+)(12\.2\([0-9]\)\|12\.2)CX[0-9],"))ok=1; # 12.2CY if(egrep(string:os, pattern:"(^\|\s+)(12\.2\([0-9]\)\|12\.2)CY[0-9],"))ok=1; # 12.2DA if(egrep(string:os, pattern:"(^\|\s+)((12\.2\(([0-9]\|1[0-1])\)\|12\.2)DA[0-9]\|12\.2\(12\)DA[0-2]),"))ok=1; # 12.2DD if(egrep(string:os, pattern:"(^\|\s+)(12\.2\([0-9]\)\|12\.2)DD[0-9],"))ok=1; # 12.2JA if(egrep(string:os, pattern:"(^\|\s+)(12\.2\(([0-9]\|1[0-0])\)\|12\.2)JA[0-9],"))ok=1; # 12.2MB if(egrep(string:os, pattern:"(^\|\s+)((12\.2\([0-3]\)\|12\.2)MB[0-9]\|12\.2\(4\)MB([0-9]\|1[0-1])),"))ok=1; # 12.2MC if(egrep(string:os, pattern:"(^\|\s+)((12\.2\(([0-9]\|1[0-2])\)\|12\.2)MC[0-9]\|12\.2\(13\)MC[0-0]),"))ok=1; # 12.2S if(egrep(string:os, pattern:"(^\|\s+)((12\.2\(([0-9]\|1[0-3])\)\|12\.2)S[0-9]\|12\.2\(14\)S[0-0]),"))ok=1; # 12.2SY if(egrep(string:os, pattern:"(^\|\s+)((12\.2\(([0-9]\|1[0-3])\)\|12\.2)SY[0-9]\|12\.2\(14\)SY[0-0]),"))ok=1; # 12.2SZ if(egrep(string:os, pattern:"(^\|\s+)((12\.2\(([0-9]\|1[0-3])\)\|12\.2)SZ[0-9]\|12\.2\(14\)SZ[0-1]),"))ok=1; # 12.2T if(egrep(string:os, pattern:"(^\|\s+)((12\.2\(([0-9]\|1[0-4])\)\|12\.2)T[0-9]\|12\.2\(15\)T[0-4]),"))ok=1; # 12.2X if(egrep(string:os, pattern:"(^\|\s+)(12\.2\([0-9]\)\|12\.2)X[0-9],"))ok=1; # 12.2Y if(egrep(string:os, pattern:"(^\|\s+)(12\.2\([0-9]\)\|12\.2)Y[0-9],"))ok=1; # 12.2XA if(egrep(string:os, pattern:"(^\|\s+)(12\.2\([0-9]\)\|12\.2)XA[0-9],"))ok=1; # 12.2XS if(egrep(string:os, pattern:"(^\|\s+)(12\.2\([0-9]\)\|12\.2)XS[0-9],"))ok=1; # 12.2XD if(egrep(string:os, pattern:"(^\|\s+)(12\.2\([0-9]\)\|12\.2)XD[0-9],"))ok=1; # 12.2XE if(egrep(string:os, pattern:"(^\|\s+)(12\.2\([0-9]\)\|12\.2)XE[0-9],"))ok=1; # 12.2XH if(egrep(string:os, pattern:"(^\|\s+)(12\.2\([0-9]\)\|12\.2)XH[0-9],"))ok=1; # 12.2XI if(egrep(string:os, pattern:"(^\|\s+)(12\.2\([0-9]\)\|12\.2)XI[0-9],"))ok=1; # 12.2XJ if(egrep(string:os, pattern:"(^\|\s+)(12\.2\([0-9]\)\|12\.2)XJ[0-9],"))ok=1; # 12.2XK if(egrep(string:os, pattern:"(^\|\s+)(12\.2\([0-9]\)\|12\.2)XK[0-9],"))ok=1; # 12.2XL if(egrep(string:os, pattern:"(^\|\s+)(12\.2\([0-9]\)\|12\.2)XL[0-9],"))ok=1; # 12.2XM if(egrep(string:os, pattern:"(^\|\s+)(12\.2\([0-9]\)\|12\.2)XM[0-9],"))ok=1; # 12.2XQ if(egrep(string:os, pattern:"(^\|\s+)(12\.2\([0-9]\)\|12\.2)XQ[0-9],"))ok=1; # 12.2XU if(egrep(string:os, pattern:"(^\|\s+)(12\.2\([0-9]\)\|12\.2)XU[0-9],"))ok=1; # 12.2XW if(egrep(string:os, pattern:"(^\|\s+)(12\.2\([0-9]\)\|12\.2)XW[0-9],"))ok=1; # 12.2YA if(egrep(string:os, pattern:"(^\|\s+)(12\.2\([0-9]\)\|12\.2)YA[0-9],"))ok=1; # 12.2YB if(egrep(string:os, pattern:"(^\|\s+)(12\.2\([0-9]\)\|12\.2)YB[0-9],"))ok=1; # 12.2YC if(egrep(string:os, pattern:"(^\|\s+)(12\.2\([0-9]\)\|12\.2)YC[0-9],"))ok=1; # 12.2YF if(egrep(string:os, pattern:"(^\|\s+)(12\.2\([0-9]\)\|12\.2)YF[0-9],"))ok=1; # 12.2YG if(egrep(string:os, pattern:"(^\|\s+)(12\.2\([0-9]\)\|12\.2)YG[0-9],"))ok=1; # 12.2YH if(egrep(string:os, pattern:"(^\|\s+)(12\.2\([0-9]\)\|12\.2)YH[0-9],"))ok=1; # 12.2YJ if(egrep(string:os, pattern:"(^\|\s+)(12\.2\([0-9]\)\|12\.2)YJ[0-9],"))ok=1; # 12.2YT if(egrep(string:os, pattern:"(^\|\s+)(12\.2\([0-9]\)\|12\.2)YT[0-9],"))ok=1; # 12.2YN if(egrep(string:os, pattern:"(^\|\s+)(12\.2\([0-9]\)\|12\.2)YN[0-9],"))ok=1; # 12.2YO if(egrep(string:os, pattern:"(^\|\s+)(12\.2\([0-9]\)\|12\.2)YO[0-9],"))ok=1; # 12.2XB if(egrep(string:os, pattern:"(^\|\s+)((12\.2\([0-1]\)\|12\.2)XB[0-9]\|12\.2\(2\)XB([0-9]\|1[0-0])),"))ok=1; # 12.2XC if(egrep(string:os, pattern:"(^\|\s+)(12\.2\([0-9]\)\|12\.2)XC[0-9],"))ok=1; # 12.2XF if(egrep(string:os, pattern:"(^\|\s+)(12\.2\([0-9]\)\|12\.2)XF[0-9],"))ok=1; # 12.2XG if(egrep(string:os, pattern:"(^\|\s+)(12\.2\([0-9]\)\|12\.2)XG[0-9],"))ok=1; # 12.2XN if(egrep(string:os, pattern:"(^\|\s+)(12\.2\([0-9]\)\|12\.2)XN[0-9],"))ok=1; # 12.2XT if(egrep(string:os, pattern:"(^\|\s+)(12\.2\([0-9]\)\|12\.2)XT[0-9],"))ok=1; # 12.2YD if(egrep(string:os, pattern:"(^\|\s+)(12\.2\([0-9]\)\|12\.2)YD[0-9],"))ok=1; # 12.2YP if(egrep(string:os, pattern:"(^\|\s+)((12\.2\(([0-9]\|1[0-0])\)\|12\.2)YP[0-9]\|12\.2\(11\)YP[0-0]),"))ok=1; # 12.2YK if(egrep(string:os, pattern:"(^\|\s+)(12\.2\([0-9]\)\|12\.2)YK[0-9],"))ok=1; # 12.2YL if(egrep(string:os, pattern:"(^\|\s+)(12\.2\([0-9]\)\|12\.2)YL[0-9],"))ok=1; # 12.2YM if(egrep(string:os, pattern:"(^\|\s+)(12\.2\([0-9]\)\|12\.2)YM[0-9],"))ok=1; # 12.2YU if(egrep(string:os, pattern:"(^\|\s+)(12\.2\([0-9]\)\|12\.2)YU[0-9],"))ok=1; # 12.2YV if(egrep(string:os, pattern:"(^\|\s+)(12\.2\([0-9]\)\|12\.2)YV[0-9],"))ok=1; # 12.2YQ if(egrep(string:os, pattern:"(^\|\s+)(12\.2\([0-9]\)\|12\.2)YQ[0-9],"))ok=1; # 12.2YR if(egrep(string:os, pattern:"(^\|\s+)(12\.2\([0-9]\)\|12\.2)YR[0-9],"))ok=1; # 12.2YS if(egrep(string:os, pattern:"(^\|\s+)(12\.2\(([0-9]\|1[0-4])\)\|12\.2)YS[0-9],"))ok=1; # 12.2YW if(egrep(string:os, pattern:"(^\|\s+)((12\.2\([0-7]\)\|12\.2)YW[0-9]\|12\.2\(8\)YW[0-1]),"))ok=1; # 12.2YX if(egrep(string:os, pattern:"(^\|\s+)((12\.2\(([0-9]\|1[0-0])\)\|12\.2)YX[0-9]\|12\.2\(11\)YX[0-0]),"))ok=1; # 12.2YY if(egrep(string:os, pattern:"(^\|\s+)((12\.2\([0-7]\)\|12\.2)YY[0-9]\|12\.2\(8\)YY[0-2]),"))ok=1; # 12.2YZ if(egrep(string:os, pattern:"(^\|\s+)((12\.2\(([0-9]\|1[0-0])\)\|12\.2)YZ[0-9]\|12\.2\(11\)YZ[0-1]),"))ok=1; # 12.2ZA if(egrep(string:os, pattern:"(^\|\s+)((12\.2\(([0-9]\|1[0-3])\)\|12\.2)ZA[0-9]\|12\.2\(14\)ZA[0-1]),"))ok=1; # 12.2ZB if(egrep(string:os, pattern:"(^\|\s+)((12\.2\([0-7]\)\|12\.2)ZB[0-9]\|12\.2\(8\)ZB[0-6]),"))ok=1; # 12.2ZC if(egrep(string:os, pattern:"(^\|\s+)(12\.2\(([0-9]\|1[0-2])\)\|12\.2)ZC[0-9],"))ok=1; # 12.2ZD if(egrep(string:os, pattern:"(^\|\s+)(12\.2\([0-9]\)\|12\.2)ZD[0-9],"))ok=1; # 12.2ZE if(egrep(string:os, pattern:"(^\|\s+)(12\.2\([0-9]\)\|12\.2)ZE[0-9],"))ok=1; # 12.2ZJ if(egrep(string:os, pattern:"(^\|\s+)((12\.2\(([0-9]\|1[0-4])\)\|12\.2)ZJ[0-9]\|12\.2\(15\)ZJ[0-0]),"))ok=1; #---------------------------------------------- if(ok)security_hole(port:161, proto:"udp");

Oval

accepted

2008-09-08T04:00:29.991-04:00

class

vulnerability

contributors

name	Yuzheng Zhou
organization	Hewlett-Packard

description

family

ios

oval:org.mitre.oval:def:5603

status

accepted

submitted

2008-05-26T11:06:36.000-04:00

title

Cisco Systems IOS 11.x/12.x DoS Vulnerability

version

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

Common Attack Pattern Enumeration and Classification (CAPEC)

Exploit-Db

Nessus

Oval

References