Vulnerabilities > CVE-2006-0340 - Improper Input Validation vulnerability in Cisco IOS

CVSS 7.1 - HIGH

Attack vector

NETWORK

Attack complexity

MEDIUM

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

COMPLETE

network

cisco

CWE-20

nessus

NVD

Published: 2006-01-21

Updated: 2017-07-20

Summary

Unspecified vulnerability in Stack Group Bidding Protocol (SGBP) support in Cisco IOS 12.0 through 12.4 running on various Cisco products, when SGBP is enabled, allows remote attackers on the local network to cause a denial of service (device hang and network traffic loss) via a crafted UDP packet to port 9900.

Vulnerable Configurations

Part	Description	Count
OS	Cisco Cisco IOS 12.0 Cisco IOS 12.0S Cisco IOS 12.0Sc Cisco IOS 12.0T Cisco IOS 12.0Xa Cisco IOS 12.0Xc Cisco IOS 12.0Xd Cisco IOS 12.0Xe Cisco IOS 12.0Xg Cisco IOS 12.0Xh Cisco IOS 12.0Xi Cisco IOS 12.0Xj Cisco IOS 12.0Xk Cisco IOS 12.0Xl Cisco IOS 12.0Xn Cisco IOS 12.0Xr Cisco IOS 12.1 Cisco IOS 12.1Aa Cisco IOS 12.1E Cisco IOS 12.1Ec Cisco IOS 12.1Ex Cisco IOS 12.1Ez Cisco IOS 12.1Ga Cisco IOS 12.1Gb Cisco IOS 12.1T Cisco IOS 12.1Xa Cisco IOS 12.1Xd Cisco IOS 12.1Xh Cisco IOS 12.1Xi Cisco IOS 12.1Xl Cisco IOS 12.1Xm Cisco IOS 12.1Xq Cisco IOS 12.1Xs Cisco IOS 12.1Xu Cisco IOS 12.1Xw Cisco IOS 12.1Xx Cisco IOS 12.1Xy Cisco IOS 12.1Xz Cisco IOS 12.1Ya Cisco IOS 12.1Yb Cisco IOS 12.1Yd Cisco IOS 12.2 Cisco IOS 12.2B Cisco IOS 12.2Bc Cisco IOS 12.2Bw Cisco IOS 12.2By Cisco IOS 12.2Cx Cisco IOS 12.2Dd Cisco IOS 12.2Dx Cisco IOS 12.2Mc Cisco IOS 12.2S Cisco IOS 12.2Su Cisco IOS 12.2Sy Cisco IOS 12.2Sz Cisco IOS 12.2T Cisco IOS 12.2Xa Cisco IOS 12.2Xb Cisco IOS 12.2Xc Cisco IOS 12.2Xf Cisco IOS 12.2Xg Cisco IOS 12.2Xk Cisco IOS 12.2Xl Cisco IOS 12.2Xs Cisco IOS 12.2Xt Cisco IOS 12.2Xv Cisco IOS 12.2Yd Cisco IOS 12.2Ye Cisco IOS 12.2Yn Cisco IOS 12.2Yt Cisco IOS 12.2Yw Cisco IOS 12.2Yx Cisco IOS 12.2Yy Cisco IOS 12.2Yz Cisco IOS 12.2Za Cisco IOS 12.2Zb Cisco IOS 12.2Zd Cisco IOS 12.2Ze Cisco IOS 12.2Zj Cisco IOS 12.2Zn Cisco IOS 12.3 Cisco IOS 12.3B Cisco IOS 12.3Bc Cisco IOS 12.3Bw Cisco IOS 12.3T Cisco IOS 12.3Xb Cisco IOS 12.3Xd Cisco IOS 12.3Xf Cisco IOS 12.3Xh Cisco IOS 12.3Xi Cisco IOS 12.3Xj Cisco IOS 12.3Xm Cisco IOS 12.3Xq Cisco IOS 12.3Xu Cisco IOS 12.3Xw Cisco IOS 12.3Yf Cisco IOS 12.3Yg Cisco IOS 12.3Yj Cisco IOS 12.3Yk Cisco IOS 12.3Ym Cisco IOS 12.3Yq Cisco IOS 12.3Yt Cisco IOS 12.3Yu Cisco IOS 12.3Yx Cisco IOS 12.4 Cisco IOS 12.4Mr Cisco IOS 12.4T Cisco IOS 12.4Xa Cisco IOS 12.4Xb	108

Common Weakness Enumeration (CWE)

CWE-20 - Improper Input Validation

Common Attack Pattern Enumeration and Classification (CAPEC)

Buffer Overflow via Environment Variables
This attack pattern involves causing a buffer overflow through manipulation of environment variables. Once the attacker finds that they can modify an environment variable, they may try to overflow associated buffers. This attack leverages implicit trust often placed in environment variables.
Server Side Include (SSI) Injection
An attacker can use Server Side Include (SSI) Injection to send code to a web application that then gets executed by the web server. Doing so enables the attacker to achieve similar results to Cross Site Scripting, viz., arbitrary code execution and information disclosure, albeit on a more limited scale, since the SSI directives are nowhere near as powerful as a full-fledged scripting language. Nonetheless, the attacker can conveniently gain access to sensitive files, such as password files, and execute shell commands.
Cross Zone Scripting
An attacker is able to cause a victim to load content into their web-browser that bypasses security zone controls and gain access to increased privileges to execute scripting code or other web objects such as unsigned ActiveX controls or applets. This is a privilege elevation attack targeted at zone-based web-browser security. In a zone-based model, pages belong to one of a set of zones corresponding to the level of privilege assigned to that page. Pages in an untrusted zone would have a lesser level of access to the system and/or be restricted in the types of executable content it was allowed to invoke. In a cross-zone scripting attack, a page that should be assigned to a less privileged zone is granted the privileges of a more trusted zone. This can be accomplished by exploiting bugs in the browser, exploiting incorrect configuration in the zone controls, through a cross-site scripting attack that causes the attackers' content to be treated as coming from a more trusted page, or by leveraging some piece of system functionality that is accessible from both the trusted and less trusted zone. This attack differs from "Restful Privilege Escalation" in that the latter correlates to the inadequate securing of RESTful access methods (such as HTTP DELETE) on the server, while cross-zone scripting attacks the concept of security zones as implemented by a browser.
Cross Site Scripting through Log Files
An attacker may leverage a system weakness where logs are susceptible to log injection to insert scripts into the system's logs. If these logs are later viewed by an administrator through a thin administrative interface and the log data is not properly HTML encoded before being written to the page, the attackers' scripts stored in the log will be executed in the administrative interface with potentially serious consequences. This attack pattern is really a combination of two other attack patterns: log injection and stored cross site scripting.
Command Line Execution through SQL Injection
An attacker uses standard SQL injection methods to inject data into the command line for execution. This could be done directly through misuse of directives such as MSSQL_xp_cmdshell or indirectly through injection of data into the database that would be interpreted as shell commands. Sometime later, an unscrupulous backend application (or could be part of the functionality of the same application) fetches the injected data stored in the database and uses this data as command line arguments without performing proper validation. The malicious data escapes that data plane by spawning new commands to be executed on the host.

Nessus

NASL family	CISCO
NASL id	CISCO-SA-20060118-SGBPHTTP.NASL
description	The Cisco IOS Stack Group Bidding Protocol (SGBP) feature in certain versions of Cisco IOS software is vulnerable to a remotely-exploitable denial of service condition. Devices that do not support or have not enabled the SGBP protocol are not affected by this vulnerability. Cisco has made free software available to address this vulnerability for affected customers. There are workarounds available to mitigate the effects of the vulnerability.
last seen	2019-10-28
modified	2010-09-01
plugin id	48992
published	2010-09-01
reporter	This script is (C) 2010-2018 Tenable Network Security, Inc.
source	https://www.tenable.com/plugins/nessus/48992
title	IOS Stack Group Bidding Protocol Crafted Packet DoS - Cisco Systems
code	#TRUSTED 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 # # (C) Tenable Network Security, Inc. # # Security advisory is (C) CISCO, Inc. # See https://www.cisco.com/en/US/products/products_security_advisory09186a00805e8a63.shtml if (NASL_LEVEL < 3000) exit(0); include("compat.inc"); if (description) { script_id(48992); script_version("1.20"); script_set_attribute(attribute:"plugin_modification_date", value:"2018/11/15"); script_cve_id("CVE-2006-0340"); script_bugtraq_id(16303); script_name(english:"IOS Stack Group Bidding Protocol Crafted Packet DoS - Cisco Systems"); script_summary(english:"Checks the IOS version."); script_set_attribute(attribute:"synopsis", value:"The remote device is missing a vendor-supplied security patch"); script_set_attribute(attribute:"description", value: 'The Cisco IOS Stack Group Bidding Protocol (SGBP) feature in certain versions of Cisco IOS software is vulnerable to a remotely-exploitable denial of service condition. Devices that do not support or have not enabled the SGBP protocol are not affected by this vulnerability. Cisco has made free software available to address this vulnerability for affected customers. There are workarounds available to mitigate the effects of the vulnerability. '); script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?313f78ef"); # https://www.cisco.com/en/US/products/products_security_advisory09186a00805e8a63.shtml script_set_attribute(attribute:"see_also", value: "http://www.nessus.org/u?493824c7"); script_set_attribute(attribute:"solution", value: "Apply the relevant patch referenced in Cisco Security Advisory cisco-sa-20060118-sgbp."); script_set_cvss_base_vector("CVSS2#AV:N/AC:M/Au:N/C:N/I:N/A:C"); script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C"); script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available"); script_set_attribute(attribute:"exploit_available", value:"false"); script_cwe_id(20); script_set_attribute(attribute:"plugin_type", value:"local"); script_set_attribute(attribute:"cpe", value:"cpe:/o:cisco:ios"); script_set_attribute(attribute:"vuln_publication_date", value:"2006/01/18"); script_set_attribute(attribute:"patch_publication_date", value:"2006/01/18"); script_set_attribute(attribute:"plugin_publication_date", value:"2010/09/01"); script_end_attributes(); script_xref(name:"CISCO-BUG-ID", value:"CSCsb11124"); script_xref(name:"CISCO-SA", value:"cisco-sa-20060118-sgbp"); script_category(ACT_GATHER_INFO); script_copyright(english:"This script is (C) 2010-2018 Tenable Network Security, Inc."); script_family(english:"CISCO"); script_dependencie("cisco_ios_version.nasl"); script_require_keys("Host/Cisco/IOS/Version"); exit(0); } include("audit.inc"); include("cisco_func.inc"); include("cisco_kb_cmd_func.inc"); flag = 0; version = get_kb_item_or_exit("Host/Cisco/IOS/Version"); override = 0; if (version == '12.4(2)T2') flag++; else if (version == '12.4(2)T1') flag++; else if (version == '12.4(2)T') flag++; else if (version == '12.4(1a)') flag++; else if (version == '12.4(1)') flag++; else if (version == '12.3(8)ZA') flag++; else if (version == '12.3(14)YU1') flag++; else if (version == '12.3(14)YU') flag++; else if (version == '12.3(14)YT1') flag++; else if (version == '12.3(14)YT') flag++; else if (version == '12.3(14)YQ3') flag++; else if (version == '12.3(14)YQ2') flag++; else if (version == '12.3(14)YQ1') flag++; else if (version == '12.3(14)YQ') flag++; else if (version == '12.3(14)YM3') flag++; else if (version == '12.3(14)YM2') flag++; else if (version == '12.3(11)YK2') flag++; else if (version == '12.3(11)YK1') flag++; else if (version == '12.3(11)YK') flag++; else if (version == '12.3(11)YJ') flag++; else if (version == '12.3(8)YG4') flag++; else if (version == '12.3(8)YG3') flag++; else if (version == '12.3(8)YG2') flag++; else if (version == '12.3(8)YG') flag++; else if (version == '12.3(11)YF4') flag++; else if (version == '12.3(11)YF3') flag++; else if (version == '12.3(11)YF2') flag++; else if (version == '12.3(11)YF1') flag++; else if (version == '12.3(11)YF') flag++; else if (version == '12.3(2)XZ2') flag++; else if (version == '12.3(2)XZ1') flag++; else if (version == '12.3(2)XZ') flag++; else if (version == '12.3(8)XX2d') flag++; else if (version == '12.3(8)XW3') flag++; else if (version == '12.3(8)XW2') flag++; else if (version == '12.3(8)XW1') flag++; else if (version == '12.3(8)XW') flag++; else if (version == '12.3(8)XU5') flag++; else if (version == '12.3(8)XU4') flag++; else if (version == '12.3(8)XU3') flag++; else if (version == '12.3(8)XU2') flag++; else if (version == '12.3(8)XU1') flag++; else if (version == '12.3(8)XU') flag++; else if (version == '12.3(4)XQ1') flag++; else if (version == '12.3(4)XQ') flag++; else if (version == '12.3(11)XL1') flag++; else if (version == '12.3(11)XL') flag++; else if (version == '12.3(7)XJ2') flag++; else if (version == '12.3(7)XJ1') flag++; else if (version == '12.3(7)XJ') flag++; else if (version == '12.3(7)XI8') flag++; else if (version == '12.3(7)XI7b') flag++; else if (version == '12.3(7)XI7a') flag++; else if (version == '12.3(7)XI7') flag++; else if (version == '12.3(7)XI6') flag++; else if (version == '12.3(7)XI5') flag++; else if (version == '12.3(7)XI4') flag++; else if (version == '12.3(7)XI3') flag++; else if (version == '12.3(7)XI2') flag++; else if (version == '12.3(7)XI1') flag++; else if (version == '12.3(2)XF') flag++; else if (version == '12.3(4)XD4') flag++; else if (version == '12.3(4)XD3') flag++; else if (version == '12.3(4)XD2') flag++; else if (version == '12.3(4)XD1') flag++; else if (version == '12.3(4)XD') flag++; else if (version == '12.3(2)XB3') flag++; else if (version == '12.3(2)XB1') flag++; else if (version == '12.3(2)XB') flag++; else if (version == '12.3(2)XA4') flag++; else if (version == '12.3(14)T5') flag++; else if (version == '12.3(14)T3') flag++; else if (version == '12.3(14)T2') flag++; else if (version == '12.3(14)T1') flag++; else if (version == '12.3(14)T') flag++; else if (version == '12.3(11)T8') flag++; else if (version == '12.3(11)T7') flag++; else if (version == '12.3(11)T6') flag++; else if (version == '12.3(11)T5') flag++; else if (version == '12.3(11)T4') flag++; else if (version == '12.3(11)T3') flag++; else if (version == '12.3(11)T2') flag++; else if (version == '12.3(11)T') flag++; else if (version == '12.3(8)T9') flag++; else if (version == '12.3(8)T8') flag++; else if (version == '12.3(8)T7') flag++; else if (version == '12.3(8)T6') flag++; else if (version == '12.3(8)T5') flag++; else if (version == '12.3(8)T4') flag++; else if (version == '12.3(8)T3') flag++; else if (version == '12.3(8)T11') flag++; else if (version == '12.3(8)T10') flag++; else if (version == '12.3(8)T1') flag++; else if (version == '12.3(8)T') flag++; else if (version == '12.3(7)T9') flag++; else if (version == '12.3(7)T8') flag++; else if (version == '12.3(7)T7') flag++; else if (version == '12.3(7)T6') flag++; else if (version == '12.3(7)T4') flag++; else if (version == '12.3(7)T3') flag++; else if (version == '12.3(7)T2') flag++; else if (version == '12.3(7)T12') flag++; else if (version == '12.3(7)T11') flag++; else if (version == '12.3(7)T10') flag++; else if (version == '12.3(7)T1') flag++; else if (version == '12.3(7)T') flag++; else if (version == '12.3(4)T9') flag++; else if (version == '12.3(4)T8') flag++; else if (version == '12.3(4)T7') flag++; else if (version == '12.3(4)T6') flag++; else if (version == '12.3(4)T4') flag++; else if (version == '12.3(4)T3') flag++; else if (version == '12.3(4)T2a') flag++; else if (version == '12.3(4)T2') flag++; else if (version == '12.3(4)T11') flag++; else if (version == '12.3(4)T10') flag++; else if (version == '12.3(4)T1') flag++; else if (version == '12.3(4)T') flag++; else if (version == '12.3(2)T9') flag++; else if (version == '12.3(2)T8') flag++; else if (version == '12.3(2)T7') flag++; else if (version == '12.3(2)T6') flag++; else if (version == '12.3(2)T5') flag++; else if (version == '12.3(2)T4') flag++; else if (version == '12.3(2)T3') flag++; else if (version == '12.3(2)T2') flag++; else if (version == '12.3(2)T1') flag++; else if (version == '12.3(2)T') flag++; else if (version == '12.3(1a)BW') flag++; else if (version == '12.3(9a)BC9') flag++; else if (version == '12.3(9a)BC8') flag++; else if (version == '12.3(9a)BC7') flag++; else if (version == '12.3(9a)BC6') flag++; else if (version == '12.3(9a)BC5') flag++; else if (version == '12.3(9a)BC4') flag++; else if (version == '12.3(9a)BC3') flag++; else if (version == '12.3(9a)BC2') flag++; else if (version == '12.3(9a)BC1') flag++; else if (version == '12.3(9a)BC') flag++; else if (version == '12.3(5a)B5') flag++; else if (version == '12.3(5a)B4') flag++; else if (version == '12.3(5a)B3') flag++; else if (version == '12.3(5a)B2') flag++; else if (version == '12.3(5a)B1') flag++; else if (version == '12.3(5a)B') flag++; else if (version == '12.3(3)B1') flag++; else if (version == '12.3(3)B') flag++; else if (version == '12.3(1a)B') flag++; else if (version == '12.3(15b)') flag++; else if (version == '12.3(15a)') flag++; else if (version == '12.3(15)') flag++; else if (version == '12.3(13b)') flag++; else if (version == '12.3(13a)') flag++; else if (version == '12.3(13)') flag++; else if (version == '12.3(12e)') flag++; else if (version == '12.3(12d)') flag++; else if (version == '12.3(12c)') flag++; else if (version == '12.3(12b)') flag++; else if (version == '12.3(12a)') flag++; else if (version == '12.3(12)') flag++; else if (version == '12.3(10e)') flag++; else if (version == '12.3(10d)') flag++; else if (version == '12.3(10c)') flag++; else if (version == '12.3(10b)') flag++; else if (version == '12.3(10a)') flag++; else if (version == '12.3(10)') flag++; else if (version == '12.3(9e)') flag++; else if (version == '12.3(9d)') flag++; else if (version == '12.3(9c)') flag++; else if (version == '12.3(9b)') flag++; else if (version == '12.3(9a)') flag++; else if (version == '12.3(9)') flag++; else if (version == '12.3(6f)') flag++; else if (version == '12.3(6e)') flag++; else if (version == '12.3(6c)') flag++; else if (version == '12.3(6b)') flag++; else if (version == '12.3(6a)') flag++; else if (version == '12.3(6)') flag++; else if (version == '12.3(5f)') flag++; else if (version == '12.3(5e)') flag++; else if (version == '12.3(5d)') flag++; else if (version == '12.3(5c)') flag++; else if (version == '12.3(5b)') flag++; else if (version == '12.3(5a)') flag++; else if (version == '12.3(5)') flag++; else if (version == '12.3(3i)') flag++; else if (version == '12.3(3h)') flag++; else if (version == '12.3(3g)') flag++; else if (version == '12.3(3f)') flag++; else if (version == '12.3(3e)') flag++; else if (version == '12.3(3c)') flag++; else if (version == '12.3(3b)') flag++; else if (version == '12.3(3a)') flag++; else if (version == '12.3(3)') flag++; else if (version == '12.3(1a)') flag++; else if (version == '12.3(1)') flag++; else if (version == '12.2(15)ZJ5') flag++; else if (version == '12.2(15)ZJ3') flag++; else if (version == '12.2(15)ZJ2') flag++; else if (version == '12.2(15)ZJ1') flag++; else if (version == '12.2(15)ZJ') flag++; else if (version == '12.2(13)ZE') flag++; else if (version == '12.2(13)ZD4') flag++; else if (version == '12.2(13)ZD3') flag++; else if (version == '12.2(13)ZD2') flag++; else if (version == '12.2(13)ZD1') flag++; else if (version == '12.2(13)ZD') flag++; else if (version == '12.2(8)ZB8') flag++; else if (version == '12.2(8)ZB7') flag++; else if (version == '12.2(8)ZB6') flag++; else if (version == '12.2(8)ZB5') flag++; else if (version == '12.2(8)ZB4a') flag++; else if (version == '12.2(8)ZB4') flag++; else if (version == '12.2(8)ZB3') flag++; else if (version == '12.2(8)ZB2') flag++; else if (version == '12.2(8)ZB1') flag++; else if (version == '12.2(8)ZB') flag++; else if (version == '12.2(14)ZA7') flag++; else if (version == '12.2(14)ZA6') flag++; else if (version == '12.2(14)ZA5') flag++; else if (version == '12.2(14)ZA4') flag++; else if (version == '12.2(14)ZA3') flag++; else if (version == '12.2(14)ZA2') flag++; else if (version == '12.2(14)ZA1') flag++; else if (version == '12.2(14)ZA') flag++; else if (version == '12.2(9)ZA') flag++; else if (version == '12.2(11)YZ2') flag++; else if (version == '12.2(11)YZ1') flag++; else if (version == '12.2(11)YZ') flag++; else if (version == '12.2(8)YY4') flag++; else if (version == '12.2(8)YY3') flag++; else if (version == '12.2(8)YY2') flag++; else if (version == '12.2(8)YY1') flag++; else if (version == '12.2(8)YY') flag++; else if (version == '12.2(11)YX1') flag++; else if (version == '12.2(11)YX') flag++; else if (version == '12.2(8)YW3') flag++; else if (version == '12.2(8)YW2') flag++; else if (version == '12.2(8)YW1') flag++; else if (version == '12.2(8)YW') flag++; else if (version == '12.2(11)YT2') flag++; else if (version == '12.2(11)YT1') flag++; else if (version == '12.2(11)YT') flag++; else if (version == '12.2(8)YN1') flag++; else if (version == '12.2(8)YN') flag++; else if (version == '12.2(8)YJ') flag++; else if (version == '12.2(9)YE') flag++; else if (version == '12.2(8)YD3') flag++; else if (version == '12.2(8)YD2') flag++; else if (version == '12.2(8)YD1') flag++; else if (version == '12.2(8)YD') flag++; else if (version == '12.2(4)XV5') flag++; else if (version == '12.2(4)XV4a') flag++; else if (version == '12.2(4)XV4') flag++; else if (version == '12.2(4)XV3') flag++; else if (version == '12.2(4)XV2') flag++; else if (version == '12.2(4)XV1') flag++; else if (version == '12.2(4)XV') flag++; else if (version == '12.2(2)XU') flag++; else if (version == '12.2(2)XT3') flag++; else if (version == '12.2(2)XT2') flag++; else if (version == '12.2(2)XT') flag++; else if (version == '12.2(1)XS2') flag++; else if (version == '12.2(1)XS1a') flag++; else if (version == '12.2(1)XS') flag++; else if (version == '12.2(2)XN') flag++; else if (version == '12.2(4)XL6') flag++; else if (version == '12.2(4)XL5') flag++; else if (version == '12.2(4)XL4') flag++; else if (version == '12.2(4)XL3') flag++; else if (version == '12.2(4)XL') flag++; else if (version == '12.2(2)XK3') flag++; else if (version == '12.2(2)XK2') flag++; else if (version == '12.2(2)XK') flag++; else if (version == '12.2(2)XG1') flag++; else if (version == '12.2(2)XG') flag++; else if (version == '12.2(4)XF1') flag++; else if (version == '12.2(2)XC2') flag++; else if (version == '12.2(2)XC1') flag++; else if (version == '12.2(2)XC') flag++; else if (version == '12.2(1a)XC3') flag++; else if (version == '12.2(1a)XC2') flag++; else if (version == '12.2(1a)XC1') flag++; else if (version == '12.2(1a)XC') flag++; else if (version == '12.2(2)XB8') flag++; else if (version == '12.2(2)XB7') flag++; else if (version == '12.2(2)XB6') flag++; else if (version == '12.2(2)XB5') flag++; else if (version == '12.2(2)XB3') flag++; else if (version == '12.2(2)XB2') flag++; else if (version == '12.2(2)XB15') flag++; else if (version == '12.2(2)XB14') flag++; else if (version == '12.2(2)XB12') flag++; else if (version == '12.2(2)XB11') flag++; else if (version == '12.2(2)XB10') flag++; else if (version == '12.2(2)XB1') flag++; else if (version == '12.2(2)XA5') flag++; else if (version == '12.2(2)XA4') flag++; else if (version == '12.2(2)XA3') flag++; else if (version == '12.2(2)XA2') flag++; else if (version == '12.2(2)XA1') flag++; else if (version == '12.2(2)XA') flag++; else if (version == '12.2(15)T9') flag++; else if (version == '12.2(15)T8') flag++; else if (version == '12.2(15)T7') flag++; else if (version == '12.2(15)T5') flag++; else if (version == '12.2(15)T4e') flag++; else if (version == '12.2(15)T4') flag++; else if (version == '12.2(15)T2') flag++; else if (version == '12.2(15)T16') flag++; else if (version == '12.2(15)T15') flag++; else if (version == '12.2(15)T14') flag++; else if (version == '12.2(15)T13') flag++; else if (version == '12.2(15)T12') flag++; else if (version == '12.2(15)T11') flag++; else if (version == '12.2(15)T10') flag++; else if (version == '12.2(15)T1') flag++; else if (version == '12.2(15)T') flag++; else if (version == '12.2(13)T9') flag++; else if (version == '12.2(13)T8') flag++; else if (version == '12.2(13)T5') flag++; else if (version == '12.2(13)T4') flag++; else if (version == '12.2(13)T3') flag++; else if (version == '12.2(13)T2') flag++; else if (version == '12.2(13)T16') flag++; else if (version == '12.2(13)T14') flag++; else if (version == '12.2(13)T13') flag++; else if (version == '12.2(13)T12') flag++; else if (version == '12.2(13)T11') flag++; else if (version == '12.2(13)T10') flag++; else if (version == '12.2(13)T1a') flag++; else if (version == '12.2(13)T1') flag++; else if (version == '12.2(13)T') flag++; else if (version == '12.2(11)T9') flag++; else if (version == '12.2(11)T8') flag++; else if (version == '12.2(11)T6') flag++; else if (version == '12.2(11)T5') flag++; else if (version == '12.2(11)T3') flag++; else if (version == '12.2(11)T2') flag++; else if (version == '12.2(11)T11') flag++; else if (version == '12.2(11)T10') flag++; else if (version == '12.2(11)T1') flag++; else if (version == '12.2(11)T') flag++; else if (version == '12.2(8)T8') flag++; else if (version == '12.2(8)T5') flag++; else if (version == '12.2(8)T4') flag++; else if (version == '12.2(8)T3') flag++; else if (version == '12.2(8)T2') flag++; else if (version == '12.2(8)T10') flag++; else if (version == '12.2(8)T1') flag++; else if (version == '12.2(8)T') flag++; else if (version == '12.2(4)T7') flag++; else if (version == '12.2(4)T6') flag++; else if (version == '12.2(4)T5') flag++; else if (version == '12.2(4)T3') flag++; else if (version == '12.2(4)T2') flag++; else if (version == '12.2(4)T1') flag++; else if (version == '12.2(4)T') flag++; else if (version == '12.2(2)T4') flag++; else if (version == '12.2(2)T3') flag++; else if (version == '12.2(2)T2') flag++; else if (version == '12.2(2)T1') flag++; else if (version == '12.2(2)T') flag++; else if (version == '12.2(14)SZ6') flag++; else if (version == '12.2(14)SZ5') flag++; else if (version == '12.2(14)SZ4') flag++; else if (version == '12.2(14)SZ3') flag++; else if (version == '12.2(14)SZ2') flag++; else if (version == '12.2(14)SZ1') flag++; else if (version == '12.2(14)SZ') flag++; else if (version == '12.2(14)SY5') flag++; else if (version == '12.2(14)SY4') flag++; else if (version == '12.2(14)SY3') flag++; else if (version == '12.2(14)SY2') flag++; else if (version == '12.2(14)SY1') flag++; else if (version == '12.2(14)SY') flag++; else if (version == '12.2(14)SX2') flag++; else if (version == '12.2(14)SX1') flag++; else if (version == '12.2(14)SX') flag++; else if (version == '12.2(14)SU2') flag++; else if (version == '12.2(14)SU1') flag++; else if (version == '12.2(14)SU') flag++; else if (version == '12.2(27)SBC5') flag++; else if (version == '12.2(27)SBC4') flag++; else if (version == '12.2(27)SBC3') flag++; else if (version == '12.2(27)SBC2') flag++; else if (version == '12.2(27)SBC1') flag++; else if (version == '12.2(27)SBC') flag++; else if (version == '12.2(14)S9') flag++; else if (version == '12.2(14)S8') flag++; else if (version == '12.2(14)S7') flag++; else if (version == '12.2(14)S5') flag++; else if (version == '12.2(14)S3') flag++; else if (version == '12.2(14)S2') flag++; else if (version == '12.2(14)S15') flag++; else if (version == '12.2(14)S14') flag++; else if (version == '12.2(14)S13') flag++; else if (version == '12.2(14)S12') flag++; else if (version == '12.2(14)S11') flag++; else if (version == '12.2(14)S10') flag++; else if (version == '12.2(14)S1') flag++; else if (version == '12.2(14)S') flag++; else if (version == '12.2(9)S') flag++; else if (version == '12.2(15)MC2g') flag++; else if (version == '12.2(15)MC2f') flag++; else if (version == '12.2(15)MC2e') flag++; else if (version == '12.2(15)MC2c') flag++; else if (version == '12.2(15)MC2b') flag++; else if (version == '12.2(15)MC2a') flag++; else if (version == '12.2(15)MC1c') flag++; else if (version == '12.2(15)MC1b') flag++; else if (version == '12.2(15)MC1a') flag++; else if (version == '12.2(15)MC1') flag++; else if (version == '12.2(8)MC2d') flag++; else if (version == '12.2(8)MC2c') flag++; else if (version == '12.2(8)MC2b') flag++; else if (version == '12.2(8)MC2') flag++; else if (version == '12.2(8)MC1') flag++; else if (version == '12.2(12h)M1') flag++; else if (version == '12.2(12b)M1') flag++; else if (version == '12.2(6c)M1') flag++; else if (version == '12.2(1)M0') flag++; else if (version == '12.2(2)DX3') flag++; else if (version == '12.2(1)DX1') flag++; else if (version == '12.2(1)DX') flag++; else if (version == '12.2(2)DD4') flag++; else if (version == '12.2(2)DD3') flag++; else if (version == '12.2(2)DD2') flag++; else if (version == '12.2(2)DD1') flag++; else if (version == '12.2(2)DD') flag++; else if (version == '12.2(15)CX1') flag++; else if (version == '12.2(15)CX') flag++; else if (version == '12.2(11)CX1') flag++; else if (version == '12.2(11)CX') flag++; else if (version == '12.2(8)BY2') flag++; else if (version == '12.2(8)BY1') flag++; else if (version == '12.2(8)BY') flag++; else if (version == '12.2(16)BX3') flag++; else if (version == '12.2(16)BX2') flag++; else if (version == '12.2(16)BX1') flag++; else if (version == '12.2(16)BX') flag++; else if (version == '12.2(4)BW2') flag++; else if (version == '12.2(4)BW1a') flag++; else if (version == '12.2(4)BW1') flag++; else if (version == '12.2(4)BW') flag++; else if (version == '12.2(15)BC2i') flag++; else if (version == '12.2(15)BC2h') flag++; else if (version == '12.2(15)BC2g') flag++; else if (version == '12.2(15)BC2f') flag++; else if (version == '12.2(15)BC2e') flag++; else if (version == '12.2(15)BC2c') flag++; else if (version == '12.2(15)BC2b') flag++; else if (version == '12.2(15)BC2a') flag++; else if (version == '12.2(15)BC2') flag++; else if (version == '12.2(15)BC1g') flag++; else if (version == '12.2(15)BC1f') flag++; else if (version == '12.2(15)BC1d') flag++; else if (version == '12.2(15)BC1c') flag++; else if (version == '12.2(15)BC1b') flag++; else if (version == '12.2(15)BC1a') flag++; else if (version == '12.2(15)BC1') flag++; else if (version == '12.2(11)BC3d') flag++; else if (version == '12.2(11)BC3c') flag++; else if (version == '12.2(11)BC3b') flag++; else if (version == '12.2(11)BC3a') flag++; else if (version == '12.2(11)BC3') flag++; else if (version == '12.2(11)BC2') flag++; else if (version == '12.2(11)BC1b') flag++; else if (version == '12.2(11)BC1a') flag++; else if (version == '12.2(11)BC1') flag++; else if (version == '12.2(8)BC2a') flag++; else if (version == '12.2(8)BC2') flag++; else if (version == '12.2(8)BC1') flag++; else if (version == '12.2(4)BC1b') flag++; else if (version == '12.2(4)BC1a') flag++; else if (version == '12.2(4)BC1') flag++; else if (version == '12.2(16)B2') flag++; else if (version == '12.2(16)B1') flag++; else if (version == '12.2(16)B') flag++; else if (version == '12.2(15)B') flag++; else if (version == '12.2(4)B8') flag++; else if (version == '12.2(4)B7') flag++; else if (version == '12.2(4)B6') flag++; else if (version == '12.2(4)B5') flag++; else if (version == '12.2(4)B4') flag++; else if (version == '12.2(4)B3') flag++; else if (version == '12.2(4)B2') flag++; else if (version == '12.2(4)B1') flag++; else if (version == '12.2(4)B') flag++; else if (version == '12.2(31)') flag++; else if (version == '12.2(29a)') flag++; else if (version == '12.2(29)') flag++; else if (version == '12.2(28c)') flag++; else if (version == '12.2(28b)') flag++; else if (version == '12.2(28a)') flag++; else if (version == '12.2(28)') flag++; else if (version == '12.2(27b)') flag++; else if (version == '12.2(27a)') flag++; else if (version == '12.2(27)') flag++; else if (version == '12.2(26b)') flag++; else if (version == '12.2(26a)') flag++; else if (version == '12.2(26)') flag++; else if (version == '12.2(24b)') flag++; else if (version == '12.2(24a)') flag++; else if (version == '12.2(24)') flag++; else if (version == '12.2(23f)') flag++; else if (version == '12.2(23e)') flag++; else if (version == '12.2(23d)') flag++; else if (version == '12.2(23c)') flag++; else if (version == '12.2(23a)') flag++; else if (version == '12.2(23)') flag++; else if (version == '12.2(21b)') flag++; else if (version == '12.2(21a)') flag++; else if (version == '12.2(21)') flag++; else if (version == '12.2(19c)') flag++; else if (version == '12.2(19b)') flag++; else if (version == '12.2(19a)') flag++; else if (version == '12.2(19)') flag++; else if (version == '12.2(17f)') flag++; else if (version == '12.2(17e)') flag++; else if (version == '12.2(17d)') flag++; else if (version == '12.2(17b)') flag++; else if (version == '12.2(17a)') flag++; else if (version == '12.2(17)') flag++; else if (version == '12.2(16f)') flag++; else if (version == '12.2(16c)') flag++; else if (version == '12.2(16b)') flag++; else if (version == '12.2(16a)') flag++; else if (version == '12.2(16)') flag++; else if (version == '12.2(13e)') flag++; else if (version == '12.2(13c)') flag++; else if (version == '12.2(13b)') flag++; else if (version == '12.2(13a)') flag++; else if (version == '12.2(13)') flag++; else if (version == '12.2(12m)') flag++; else if (version == '12.2(12l)') flag++; else if (version == '12.2(12k)') flag++; else if (version == '12.2(12j)') flag++; else if (version == '12.2(12i)') flag++; else if (version == '12.2(12h)') flag++; else if (version == '12.2(12g)') flag++; else if (version == '12.2(12f)') flag++; else if (version == '12.2(12e)') flag++; else if (version == '12.2(12c)') flag++; else if (version == '12.2(12b)') flag++; else if (version == '12.2(12a)') flag++; else if (version == '12.2(12)') flag++; else if (version == '12.2(10g)') flag++; else if (version == '12.2(10d)') flag++; else if (version == '12.2(10b)') flag++; else if (version == '12.2(10a)') flag++; else if (version == '12.2(10)') flag++; else if (version == '12.2(7g)') flag++; else if (version == '12.2(7e)') flag++; else if (version == '12.2(7c)') flag++; else if (version == '12.2(7b)') flag++; else if (version == '12.2(7a)') flag++; else if (version == '12.2(7)') flag++; else if (version == '12.2(6j)') flag++; else if (version == '12.2(6i)') flag++; else if (version == '12.2(6h)') flag++; else if (version == '12.2(6g)') flag++; else if (version == '12.2(6f)') flag++; else if (version == '12.2(6e)') flag++; else if (version == '12.2(6d)') flag++; else if (version == '12.2(6c)') flag++; else if (version == '12.2(6b)') flag++; else if (version == '12.2(6a)') flag++; else if (version == '12.2(6)') flag++; else if (version == '12.2(5d)') flag++; else if (version == '12.2(5c)') flag++; else if (version == '12.2(5b)') flag++; else if (version == '12.2(5a)') flag++; else if (version == '12.2(5)') flag++; else if (version == '12.2(3g)') flag++; else if (version == '12.2(3d)') flag++; else if (version == '12.2(3c)') flag++; else if (version == '12.2(3b)') flag++; else if (version == '12.2(3a)') flag++; else if (version == '12.2(3)') flag++; else if (version == '12.2(1d)') flag++; else if (version == '12.2(1c)') flag++; else if (version == '12.2(1b)') flag++; else if (version == '12.2(1a)') flag++; else if (version == '12.2(1)') flag++; else if (version == '12.1(5)YD6') flag++; else if (version == '12.1(5)YD5') flag++; else if (version == '12.1(5)YD4') flag++; else if (version == '12.1(5)YD3') flag++; else if (version == '12.1(5)YD2') flag++; else if (version == '12.1(5)YD1') flag++; else if (version == '12.1(5)YD') flag++; else if (version == '12.1(5)YB5') flag++; else if (version == '12.1(5)YB4') flag++; else if (version == '12.1(5)YB') flag++; else if (version == '12.1(5)YA2') flag++; else if (version == '12.1(5)YA1') flag++; else if (version == '12.1(5)YA') flag++; else if (version == '12.1(4)XZ7') flag++; else if (version == '12.1(4)XZ6') flag++; else if (version == '12.1(4)XZ5') flag++; else if (version == '12.1(4)XZ4') flag++; else if (version == '12.1(4)XZ3') flag++; else if (version == '12.1(4)XZ2') flag++; else if (version == '12.1(4)XZ1') flag++; else if (version == '12.1(4)XZ') flag++; else if (version == '12.1(4)XY8') flag++; else if (version == '12.1(4)XY7') flag++; else if (version == '12.1(4)XY6') flag++; else if (version == '12.1(4)XY5') flag++; else if (version == '12.1(4)XY4') flag++; else if (version == '12.1(4)XY3') flag++; else if (version == '12.1(4)XY1') flag++; else if (version == '12.1(5)XX3') flag++; else if (version == '12.1(5)XX2') flag++; else if (version == '12.1(5)XX1') flag++; else if (version == '12.1(5)XX') flag++; else if (version == '12.1(3)XW2') flag++; else if (version == '12.1(3)XW1') flag++; else if (version == '12.1(3)XW') flag++; else if (version == '12.1(5)XV4') flag++; else if (version == '12.1(5)XV2') flag++; else if (version == '12.1(5)XV1') flag++; else if (version == '12.1(5)XV') flag++; else if (version == '12.1(2)XT2') flag++; else if (version == '12.1(5)XS5') flag++; else if (version == '12.1(5)XS4') flag++; else if (version == '12.1(5)XS3') flag++; else if (version == '12.1(5)XS2') flag++; else if (version == '12.1(5)XS1') flag++; else if (version == '12.1(5)XS') flag++; else if (version == '12.1(3)XS') flag++; else if (version == '12.1(3)XQ3') flag++; else if (version == '12.1(3)XQ2') flag++; else if (version == '12.1(3)XQ1') flag++; else if (version == '12.1(3)XQ') flag++; else if (version == '12.1(5)XM8') flag++; else if (version == '12.1(5)XM7') flag++; else if (version == '12.1(5)XM6') flag++; else if (version == '12.1(5)XM5') flag++; else if (version == '12.1(5)XM4') flag++; else if (version == '12.1(5)XM3') flag++; else if (version == '12.1(5)XM2') flag++; else if (version == '12.1(5)XM1') flag++; else if (version == '12.1(5)XM') flag++; else if (version == '12.1(3a)XL3') flag++; else if (version == '12.1(3a)XL2') flag++; else if (version == '12.1(3a)XL1') flag++; else if (version == '12.1(3)XL') flag++; else if (version == '12.1(3a)XI9') flag++; else if (version == '12.1(3a)XI8') flag++; else if (version == '12.1(3a)XI7') flag++; else if (version == '12.1(3a)XI6') flag++; else if (version == '12.1(3a)XI5') flag++; else if (version == '12.1(3a)XI4') flag++; else if (version == '12.1(3a)XI3') flag++; else if (version == '12.1(3a)XI2') flag++; else if (version == '12.1(3a)XI1') flag++; else if (version == '12.1(3)XI') flag++; else if (version == '12.1(2a)XH3') flag++; else if (version == '12.1(2a)XH2') flag++; else if (version == '12.1(2a)XH1') flag++; else if (version == '12.1(2a)XH') flag++; else if (version == '12.1(1)XD2') flag++; else if (version == '12.1(1)XD1') flag++; else if (version == '12.1(1)XD') flag++; else if (version == '12.1(1)XA4') flag++; else if (version == '12.1(1)XA3') flag++; else if (version == '12.1(1)XA2') flag++; else if (version == '12.1(1)XA') flag++; else if (version == '12.1(5)T9') flag++; else if (version == '12.1(5)T8b') flag++; else if (version == '12.1(5)T8a') flag++; else if (version == '12.1(5)T8') flag++; else if (version == '12.1(5)T7') flag++; else if (version == '12.1(5)T6') flag++; else if (version == '12.1(5)T5') flag++; else if (version == '12.1(5)T4') flag++; else if (version == '12.1(5)T3') flag++; else if (version == '12.1(5)T20') flag++; else if (version == '12.1(5)T2') flag++; else if (version == '12.1(5)T19') flag++; else if (version == '12.1(5)T18') flag++; else if (version == '12.1(5)T17') flag++; else if (version == '12.1(5)T15') flag++; else if (version == '12.1(5)T14') flag++; else if (version == '12.1(5)T12') flag++; else if (version == '12.1(5)T11') flag++; else if (version == '12.1(5)T10') flag++; else if (version == '12.1(5)T1') flag++; else if (version == '12.1(5)T') flag++; else if (version == '12.1(3a)T8') flag++; else if (version == '12.1(3a)T7') flag++; else if (version == '12.1(3a)T6') flag++; else if (version == '12.1(3a)T5') flag++; else if (version == '12.1(3a)T4') flag++; else if (version == '12.1(3a)T3') flag++; else if (version == '12.1(3a)T2') flag++; else if (version == '12.1(3a)T1') flag++; else if (version == '12.1(3)T') flag++; else if (version == '12.1(2a)T2') flag++; else if (version == '12.1(2a)T1') flag++; else if (version == '12.1(2)T') flag++; else if (version == '12.1(1a)T1') flag++; else if (version == '12.1(1)T') flag++; else if (version == '12.1(2)GB') flag++; else if (version == '12.1(1)GA1') flag++; else if (version == '12.1(1)GA') flag++; else if (version == '12.1(6)EZ6') flag++; else if (version == '12.1(6)EZ5') flag++; else if (version == '12.1(6)EZ4') flag++; else if (version == '12.1(6)EZ3') flag++; else if (version == '12.1(6)EZ2') flag++; else if (version == '12.1(6)EZ1') flag++; else if (version == '12.1(6)EZ') flag++; else if (version == '12.1(13)EX3') flag++; else if (version == '12.1(13)EX2') flag++; else if (version == '12.1(13)EX1') flag++; else if (version == '12.1(13)EX') flag++; else if (version == '12.1(12c)EX1') flag++; else if (version == '12.1(12c)EX') flag++; else if (version == '12.1(11b)EX1') flag++; else if (version == '12.1(11b)EX') flag++; else if (version == '12.1(10)EX2') flag++; else if (version == '12.1(10)EX1') flag++; else if (version == '12.1(10)EX') flag++; else if (version == '12.1(9)EX3') flag++; else if (version == '12.1(9)EX2') flag++; else if (version == '12.1(9)EX1') flag++; else if (version == '12.1(9)EX') flag++; else if (version == '12.1(8b)EX5') flag++; else if (version == '12.1(8b)EX3') flag++; else if (version == '12.1(8b)EX2') flag++; else if (version == '12.1(8a)EX1') flag++; else if (version == '12.1(8a)EX') flag++; else if (version == '12.1(5c)EX3') flag++; else if (version == '12.1(1)EX1') flag++; else if (version == '12.1(1)EX') flag++; else if (version == '12.1(22)EC1') flag++; else if (version == '12.1(22)EC') flag++; else if (version == '12.1(20)EC3') flag++; else if (version == '12.1(20)EC2') flag++; else if (version == '12.1(20)EC1') flag++; else if (version == '12.1(20)EC') flag++; else if (version == '12.1(19)EC1') flag++; else if (version == '12.1(19)EC') flag++; else if (version == '12.1(13)EC4') flag++; else if (version == '12.1(13)EC3') flag++; else if (version == '12.1(13)EC2') flag++; else if (version == '12.1(13)EC1') flag++; else if (version == '12.1(13)EC') flag++; else if (version == '12.1(12c)EC1') flag++; else if (version == '12.1(12c)EC') flag++; else if (version == '12.1(11b)EC1') flag++; else if (version == '12.1(11b)EC') flag++; else if (version == '12.1(10)EC1') flag++; else if (version == '12.1(10)EC') flag++; else if (version == '12.1(9)EC1') flag++; else if (version == '12.1(8)EC1') flag++; else if (version == '12.1(8)EC') flag++; else if (version == '12.1(7)EC') flag++; else if (version == '12.1(6)EC1') flag++; else if (version == '12.1(6)EC') flag++; else if (version == '12.1(5)EC1') flag++; else if (version == '12.1(5)EC') flag++; else if (version == '12.1(4)EC') flag++; else if (version == '12.1(3a)EC1') flag++; else if (version == '12.1(3a)EC') flag++; else if (version == '12.1(2)EC1') flag++; else if (version == '12.1(2)EC') flag++; else if (version == '12.1(26)E4') flag++; else if (version == '12.1(26)E3') flag++; else if (version == '12.1(26)E2') flag++; else if (version == '12.1(26)E1') flag++; else if (version == '12.1(26)E') flag++; else if (version == '12.1(23)E4') flag++; else if (version == '12.1(23)E3') flag++; else if (version == '12.1(23)E2') flag++; else if (version == '12.1(23)E1') flag++; else if (version == '12.1(23)E') flag++; else if (version == '12.1(22)E6') flag++; else if (version == '12.1(22)E5') flag++; else if (version == '12.1(22)E4') flag++; else if (version == '12.1(22)E3') flag++; else if (version == '12.1(22)E2') flag++; else if (version == '12.1(22)E1') flag++; else if (version == '12.1(22)E') flag++; else if (version == '12.1(20)E6') flag++; else if (version == '12.1(20)E5') flag++; else if (version == '12.1(20)E4') flag++; else if (version == '12.1(20)E3') flag++; else if (version == '12.1(20)E2') flag++; else if (version == '12.1(20)E1') flag++; else if (version == '12.1(20)E') flag++; else if (version == '12.1(19)E7') flag++; else if (version == '12.1(19)E6') flag++; else if (version == '12.1(19)E4') flag++; else if (version == '12.1(19)E3') flag++; else if (version == '12.1(19)E2') flag++; else if (version == '12.1(19)E1') flag++; else if (version == '12.1(19)E') flag++; else if (version == '12.1(14)E7') flag++; else if (version == '12.1(14)E6') flag++; else if (version == '12.1(14)E5') flag++; else if (version == '12.1(14)E4') flag++; else if (version == '12.1(14)E3') flag++; else if (version == '12.1(14)E2') flag++; else if (version == '12.1(14)E10') flag++; else if (version == '12.1(14)E1') flag++; else if (version == '12.1(14)E') flag++; else if (version == '12.1(13)E9') flag++; else if (version == '12.1(13)E8') flag++; else if (version == '12.1(13)E7') flag++; else if (version == '12.1(13)E6') flag++; else if (version == '12.1(13)E5') flag++; else if (version == '12.1(13)E4') flag++; else if (version == '12.1(13)E3') flag++; else if (version == '12.1(13)E2') flag++; else if (version == '12.1(13)E17') flag++; else if (version == '12.1(13)E16') flag++; else if (version == '12.1(13)E15') flag++; else if (version == '12.1(13)E14') flag++; else if (version == '12.1(13)E13') flag++; else if (version == '12.1(13)E12') flag++; else if (version == '12.1(13)E11') flag++; else if (version == '12.1(13)E10') flag++; else if (version == '12.1(13)E1') flag++; else if (version == '12.1(13)E') flag++; else if (version == '12.1(12c)E6') flag++; else if (version == '12.1(12c)E5') flag++; else if (version == '12.1(12c)E4') flag++; else if (version == '12.1(12c)E2') flag++; else if (version == '12.1(12c)E1') flag++; else if (version == '12.1(12c)E') flag++; else if (version == '12.1(11b)E7') flag++; else if (version == '12.1(11b)E4') flag++; else if (version == '12.1(11b)E3') flag++; else if (version == '12.1(11b)E2') flag++; else if (version == '12.1(11b)E14') flag++; else if (version == '12.1(11b)E12') flag++; else if (version == '12.1(11b)E11') flag++; else if (version == '12.1(11b)E10') flag++; else if (version == '12.1(11b)E1') flag++; else if (version == '12.1(11b)E0a') flag++; else if (version == '12.1(11b)E') flag++; else if (version == '12.1(10)E8') flag++; else if (version == '12.1(10)E7') flag++; else if (version == '12.1(10)E6a') flag++; else if (version == '12.1(10)E6') flag++; else if (version == '12.1(10)E5') flag++; else if (version == '12.1(10)E4') flag++; else if (version == '12.1(10)E3') flag++; else if (version == '12.1(10)E2') flag++; else if (version == '12.1(10)E1') flag++; else if (version == '12.1(10)E') flag++; else if (version == '12.1(9)E3') flag++; else if (version == '12.1(9)E2') flag++; else if (version == '12.1(9)E1') flag++; else if (version == '12.1(9)E') flag++; else if (version == '12.1(8b)E9') flag++; else if (version == '12.1(8b)E8') flag++; else if (version == '12.1(8b)E7') flag++; else if (version == '12.1(8b)E6') flag++; else if (version == '12.1(8b)E20') flag++; else if (version == '12.1(8b)E19') flag++; else if (version == '12.1(8b)E18') flag++; else if (version == '12.1(8b)E15') flag++; else if (version == '12.1(8b)E14') flag++; else if (version == '12.1(8b)E13') flag++; else if (version == '12.1(8b)E12') flag++; else if (version == '12.1(8b)E11') flag++; else if (version == '12.1(8b)E10') flag++; else if (version == '12.1(8a)E5') flag++; else if (version == '12.1(8a)E4') flag++; else if (version == '12.1(8a)E3') flag++; else if (version == '12.1(8a)E2') flag++; else if (version == '12.1(8a)E1') flag++; else if (version == '12.1(8a)E') flag++; else if (version == '12.1(7a)E6') flag++; else if (version == '12.1(7a)E5') flag++; else if (version == '12.1(7a)E4') flag++; else if (version == '12.1(7a)E3') flag++; else if (version == '12.1(7a)E2') flag++; else if (version == '12.1(7a)E1a') flag++; else if (version == '12.1(7a)E1') flag++; else if (version == '12.1(7)E0a') flag++; else if (version == '12.1(7)E') flag++; else if (version == '12.1(6)E8') flag++; else if (version == '12.1(6)E6') flag++; else if (version == '12.1(6)E5') flag++; else if (version == '12.1(6)E4') flag++; else if (version == '12.1(6)E3') flag++; else if (version == '12.1(6)E2') flag++; else if (version == '12.1(6)E13') flag++; else if (version == '12.1(6)E1') flag++; else if (version == '12.1(6)E') flag++; else if (version == '12.1(5c)E9') flag++; else if (version == '12.1(5c)E8') flag++; else if (version == '12.1(5c)E12') flag++; else if (version == '12.1(5c)E10') flag++; else if (version == '12.1(5b)E7') flag++; else if (version == '12.1(5a)E4') flag++; else if (version == '12.1(5a)E3') flag++; else if (version == '12.1(5a)E2') flag++; else if (version == '12.1(5a)E1') flag++; else if (version == '12.1(5a)E') flag++; else if (version == '12.1(4)E3') flag++; else if (version == '12.1(4)E1') flag++; else if (version == '12.1(4)E') flag++; else if (version == '12.1(3a)E8') flag++; else if (version == '12.1(3a)E7') flag++; else if (version == '12.1(3a)E6') flag++; else if (version == '12.1(3a)E5') flag++; else if (version == '12.1(3a)E4') flag++; else if (version == '12.1(3a)E3') flag++; else if (version == '12.1(3a)E1') flag++; else if (version == '12.1(3a)E') flag++; else if (version == '12.1(2)E2') flag++; else if (version == '12.1(2)E1') flag++; else if (version == '12.1(2)E') flag++; else if (version == '12.1(1)E6') flag++; else if (version == '12.1(1)E5') flag++; else if (version == '12.1(1)E4') flag++; else if (version == '12.1(1)E3') flag++; else if (version == '12.1(1)E2') flag++; else if (version == '12.1(1)E1') flag++; else if (version == '12.1(1)E') flag++; else if (version == '12.1(10)AA') flag++; else if (version == '12.1(8)AA1') flag++; else if (version == '12.1(8)AA') flag++; else if (version == '12.1(7)AA') flag++; else if (version == '12.1(6)AA') flag++; else if (version == '12.1(5)AA') flag++; else if (version == '12.1(4)AA') flag++; else if (version == '12.1(3)AA') flag++; else if (version == '12.1(2a)AA') flag++; else if (version == '12.1(1)AA1') flag++; else if (version == '12.1(1)AA') flag++; else if (version == '12.1(27b)') flag++; else if (version == '12.1(27a)') flag++; else if (version == '12.1(27)') flag++; else if (version == '12.1(26)') flag++; else if (version == '12.1(25)') flag++; else if (version == '12.1(24)') flag++; else if (version == '12.1(22c)') flag++; else if (version == '12.1(22b)') flag++; else if (version == '12.1(22a)') flag++; else if (version == '12.1(22)') flag++; else if (version == '12.1(21)') flag++; else if (version == '12.1(20a)') flag++; else if (version == '12.1(20)') flag++; else if (version == '12.1(19)') flag++; else if (version == '12.1(18)') flag++; else if (version == '12.1(17a)') flag++; else if (version == '12.1(17)') flag++; else if (version == '12.1(16)') flag++; else if (version == '12.1(15)') flag++; else if (version == '12.1(14)') flag++; else if (version == '12.1(13a)') flag++; else if (version == '12.1(13)') flag++; else if (version == '12.1(12c)') flag++; else if (version == '12.1(12b)') flag++; else if (version == '12.1(12a)') flag++; else if (version == '12.1(12)') flag++; else if (version == '12.1(11b)') flag++; else if (version == '12.1(11a)') flag++; else if (version == '12.1(11)') flag++; else if (version == '12.1(10a)') flag++; else if (version == '12.1(10)') flag++; else if (version == '12.1(9a)') flag++; else if (version == '12.1(9)') flag++; else if (version == '12.1(8b)') flag++; else if (version == '12.1(8a)') flag++; else if (version == '12.1(8)') flag++; else if (version == '12.1(7c)') flag++; else if (version == '12.1(7b)') flag++; else if (version == '12.1(7a)') flag++; else if (version == '12.1(7)') flag++; else if (version == '12.1(6b)') flag++; else if (version == '12.1(6a)') flag++; else if (version == '12.1(6)') flag++; else if (version == '12.1(5e)') flag++; else if (version == '12.1(5d)') flag++; else if (version == '12.1(5c)') flag++; else if (version == '12.1(5b)') flag++; else if (version == '12.1(5a)') flag++; else if (version == '12.1(5)') flag++; else if (version == '12.1(4c)') flag++; else if (version == '12.1(4b)') flag++; else if (version == '12.1(4a)') flag++; else if (version == '12.1(3b)') flag++; else if (version == '12.1(3)') flag++; else if (version == '12.1(2b)') flag++; else if (version == '12.1(2a)') flag++; else if (version == '12.1(2)') flag++; else if (version == '12.1(1c)') flag++; else if (version == '12.1(1a)') flag++; else if (version == '12.1(1)') flag++; else if (version == '12.0(5)XT1') flag++; else if (version == '12.0(7)XR4') flag++; else if (version == '12.0(7)XR3') flag++; else if (version == '12.0(7)XR2') flag++; else if (version == '12.0(7)XR1') flag++; else if (version == '12.0(5)XN') flag++; else if (version == '12.0(4)XL1') flag++; else if (version == '12.0(4)XL') flag++; else if (version == '12.0(7)XK3') flag++; else if (version == '12.0(7)XK2') flag++; else if (version == '12.0(7)XK1') flag++; else if (version == '12.0(7)XK') flag++; else if (version == '12.0(5)XK2') flag++; else if (version == '12.0(5)XK1') flag++; else if (version == '12.0(5)XK') flag++; else if (version == '12.0(4)XJ6') flag++; else if (version == '12.0(4)XJ5') flag++; else if (version == '12.0(4)XJ4') flag++; else if (version == '12.0(4)XJ3') flag++; else if (version == '12.0(4)XJ2') flag++; else if (version == '12.0(4)XJ1') flag++; else if (version == '12.0(4)XJ') flag++; else if (version == '12.0(4)XI1') flag++; else if (version == '12.0(4)XI') flag++; else if (version == '12.0(4)XH4') flag++; else if (version == '12.0(4)XH3') flag++; else if (version == '12.0(4)XH1') flag++; else if (version == '12.0(4)XH') flag++; else if (version == '12.0(2)XH') flag++; else if (version == '12.0(3)XG') flag++; else if (version == '12.0(7)XE2') flag++; else if (version == '12.0(7)XE1') flag++; else if (version == '12.0(5)XE8') flag++; else if (version == '12.0(5)XE7') flag++; else if (version == '12.0(5)XE6') flag++; else if (version == '12.0(5)XE5') flag++; else if (version == '12.0(5)XE4') flag++; else if (version == '12.0(5)XE3') flag++; else if (version == '12.0(5)XE1') flag++; else if (version == '12.0(5)XE') flag++; else if (version == '12.0(4)XE2') flag++; else if (version == '12.0(4)XE') flag++; else if (version == '12.0(3)XE2') flag++; else if (version == '12.0(3)XE1') flag++; else if (version == '12.0(3)XE') flag++; else if (version == '12.0(2)XE4') flag++; else if (version == '12.0(2)XE3') flag++; else if (version == '12.0(2)XE2') flag++; else if (version == '12.0(2)XE1') flag++; else if (version == '12.0(2)XE') flag++; else if (version == '12.0(1)XE') flag++; else if (version == '12.0(2)XD1') flag++; else if (version == '12.0(2)XC2') flag++; else if (version == '12.0(2)XC1') flag++; else if (version == '12.0(2)XC') flag++; else if (version == '12.0(1)XA3') flag++; else if (version == '12.0(1)XA') flag++; else if (version == '12.0(7)T3') flag++; else if (version == '12.0(7)T2') flag++; else if (version == '12.0(7)T') flag++; else if (version == '12.0(5)T2') flag++; else if (version == '12.0(5)T1') flag++; else if (version == '12.0(5)T') flag++; else if (version == '12.0(4)T1') flag++; else if (version == '12.0(4)T') flag++; else if (version == '12.0(3)T3') flag++; else if (version == '12.0(3)T2') flag++; else if (version == '12.0(3)T1') flag++; else if (version == '12.0(3)T') flag++; else if (version == '12.0(2a)T1') flag++; else if (version == '12.0(2)T') flag++; else if (version == '12.0(1)T') flag++; else if (version == '12.0(16)SC3') flag++; else if (version == '12.0(16)SC2') flag++; else if (version == '12.0(16)SC1') flag++; else if (version == '12.0(16)SC') flag++; else if (version == '12.0(15)SC1') flag++; else if (version == '12.0(15)SC') flag++; else if (version == '12.0(14)SC') flag++; else if (version == '12.0(13)SC') flag++; else if (version == '12.0(12)SC') flag++; else if (version == '12.0(11)SC') flag++; else if (version == '12.0(10)SC1') flag++; else if (version == '12.0(10)SC') flag++; else if (version == '12.0(9)SC') flag++; else if (version == '12.0(8)SC1') flag++; else if (version == '12.0(8)SC') flag++; else if (version == '12.0(7)SC') flag++; else if (version == '12.0(17)S4') flag++; else if (version == '12.0(17)S3') flag++; else if (version == '12.0(17)S2') flag++; else if (version == '12.0(17)S1') flag++; else if (version == '12.0(17)S') flag++; else if (version == '12.0(16)S1') flag++; else if (version == '12.0(16)S') flag++; else if (version == '12.0(15)S7') flag++; else if (version == '12.0(15)S6') flag++; else if (version == '12.0(15)S5') flag++; else if (version == '12.0(15)S3') flag++; else if (version == '12.0(15)S2') flag++; else if (version == '12.0(15)S1') flag++; else if (version == '12.0(15)S') flag++; else if (version == '12.0(14)S8') flag++; else if (version == '12.0(14)S7') flag++; else if (version == '12.0(14)S6') flag++; else if (version == '12.0(14)S5') flag++; else if (version == '12.0(14)S4') flag++; else if (version == '12.0(14)S3') flag++; else if (version == '12.0(14)S2') flag++; else if (version == '12.0(14)S1') flag++; else if (version == '12.0(14)S') flag++; else if (version == '12.0(13)S8') flag++; else if (version == '12.0(13)S4') flag++; else if (version == '12.0(13)S3') flag++; else if (version == '12.0(13)S2') flag++; else if (version == '12.0(13)S1') flag++; else if (version == '12.0(13)S') flag++; else if (version == '12.0(12)S4') flag++; else if (version == '12.0(12)S3') flag++; else if (version == '12.0(12)S2') flag++; else if (version == '12.0(12)S1') flag++; else if (version == '12.0(12)S') flag++; else if (version == '12.0(11)S6') flag++; else if (version == '12.0(11)S5') flag++; else if (version == '12.0(11)S4') flag++; else if (version == '12.0(11)S3') flag++; else if (version == '12.0(11)S2') flag++; else if (version == '12.0(11)S1') flag++; else if (version == '12.0(11)S') flag++; else if (version == '12.0(10)S8') flag++; else if (version == '12.0(10)S7') flag++; else if (version == '12.0(10)S5') flag++; else if (version == '12.0(10)S3b') flag++; else if (version == '12.0(10)S3') flag++; else if (version == '12.0(10)S2') flag++; else if (version == '12.0(10)S1') flag++; else if (version == '12.0(10)S') flag++; else if (version == '12.0(9)S8') flag++; else if (version == '12.0(9)S') flag++; else if (version == '12.0(8)S1') flag++; else if (version == '12.0(8)S') flag++; else if (version == '12.0(7)S1') flag++; else if (version == '12.0(7)S') flag++; else if (version == '12.0(6)S') flag++; else if (version == '12.0(5)S') flag++; else if (version == '12.0(4)S') flag++; else if (version == '12.0(3)S') flag++; else if (version == '12.0(2)S') flag++; else if (version == '12.0(28d)') flag++; else if (version == '12.0(28c)') flag++; else if (version == '12.0(28b)') flag++; else if (version == '12.0(28a)') flag++; else if (version == '12.0(28)') flag++; else if (version == '12.0(27)') flag++; else if (version == '12.0(26)') flag++; else if (version == '12.0(25)') flag++; else if (version == '12.0(24)') flag++; else if (version == '12.0(23)') flag++; else if (version == '12.0(22)') flag++; else if (version == '12.0(21a)') flag++; else if (version == '12.0(21)') flag++; else if (version == '12.0(20a)') flag++; else if (version == '12.0(20)') flag++; else if (version == '12.0(19b)') flag++; else if (version == '12.0(19a)') flag++; else if (version == '12.0(19)') flag++; else if (version == '12.0(18b)') flag++; else if (version == '12.0(18a)') flag++; else if (version == '12.0(18)') flag++; else if (version == '12.0(17a)') flag++; else if (version == '12.0(17)') flag++; else if (version == '12.0(16a)') flag++; else if (version == '12.0(16)') flag++; else if (version == '12.0(15b)') flag++; else if (version == '12.0(15a)') flag++; else if (version == '12.0(15)') flag++; else if (version == '12.0(14a)') flag++; else if (version == '12.0(14)') flag++; else if (version == '12.0(13a)') flag++; else if (version == '12.0(13)') flag++; else if (version == '12.0(12a)') flag++; else if (version == '12.0(12)') flag++; else if (version == '12.0(11a)') flag++; else if (version == '12.0(11)') flag++; else if (version == '12.0(10a)') flag++; else if (version == '12.0(10)') flag++; else if (version == '12.0(9a)') flag++; else if (version == '12.0(9)') flag++; else if (version == '12.0(8a)') flag++; else if (version == '12.0(8)') flag++; else if (version == '12.0(7a)') flag++; else if (version == '12.0(7)') flag++; else if (version == '12.0(6b)') flag++; else if (version == '12.0(6a)') flag++; else if (version == '12.0(6)') flag++; else if (version == '12.0(5a)') flag++; else if (version == '12.0(5)') flag++; else if (version == '12.0(4b)') flag++; else if (version == '12.0(4a)') flag++; else if (version == '12.0(4)') flag++; else if (version == '12.0(3d)') flag++; else if (version == '12.0(3c)') flag++; else if (version == '12.0(3b)') flag++; else if (version == '12.0(3)') flag++; else if (version == '12.0(2b)') flag++; else if (version == '12.0(2a)') flag++; else if (version == '12.0(2)') flag++; else if (version == '12.0(1a)') flag++; else if (version == '12.0(1)') flag++; if (get_kb_item("Host/local_checks_enabled")) { if (flag) { flag = 0; buf = cisco_command_kb_item("Host/Cisco/Config/show_running-config", "show running-config"); if (check_cisco_result(buf)) { if (preg(pattern:"sgbp\s+group\s+", multiline:TRUE, string:buf)) { flag = 1; } } else if (cisco_needs_enable(buf)) { flag = 1; override = 1; } } } if (flag) { security_hole(port:0, extra:cisco_caveat(override)); exit(0); } else audit(AUDIT_HOST_NOT, "affected");

NASL family	CISCO
NASL id	CSCSB11124.NASL
description	The remote host is a CISCO router containing a version of IOS which is prone to a denial of service vulnerability. An attacker may exploit this flaw to crash the remote device.
last seen	2020-06-01
modified	2020-06-02
plugin id	20744
published	2006-01-19
reporter	This script is Copyright (C) 2006-2018 Tenable Network Security, Inc.
source	https://www.tenable.com/plugins/nessus/20744
title	Cisco IOS MMP Stack Group Bidding Protocol (SGBP) Crafted UDP Packet Remote DoS (CSCsb11124)
code	# # (C) Tenable Network Security, Inc. # include("compat.inc"); if(description) { script_id(20744); script_version("1.19"); script_cve_id("CVE-2006-0340"); script_bugtraq_id(16303); script_name(english:"Cisco IOS MMP Stack Group Bidding Protocol (SGBP) Crafted UDP Packet Remote DoS (CSCsb11124)"); script_set_attribute(attribute:"synopsis", value: "The remote router can be crashed remotely." ); script_set_attribute(attribute:"description", value: "The remote host is a CISCO router containing a version of IOS which is prone to a denial of service vulnerability. An attacker may exploit this flaw to crash the remote device." ); script_set_attribute(attribute:"solution", value: "http://www.nessus.org/u?1142946b" ); script_set_cvss_base_vector("CVSS2#AV:N/AC:H/Au:N/C:N/I:N/A:C"); script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C"); script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available"); script_set_attribute(attribute:"exploit_available", value:"false"); script_cwe_id(20); script_set_attribute(attribute:"plugin_publication_date", value: "2006/01/19"); script_set_attribute(attribute:"vuln_publication_date", value: "2006/01/18"); script_cvs_date("Date: 2018/06/27 18:42:25"); script_set_attribute(attribute:"plugin_type", value:"local"); script_set_attribute(attribute:"cpe", value: "cpe:/o:cisco:ios"); script_end_attributes(); summary["english"] = "Uses SNMP to determine if a flaw is present"; script_summary(english:summary["english"]); script_category(ACT_GATHER_INFO); script_copyright(english:"This script is Copyright (C) 2006-2018 Tenable Network Security, Inc."); script_family(english:"CISCO"); script_dependencie("snmp_sysDesc.nasl", "snmp_cisco_type.nasl"); script_require_keys("SNMP/community", "SNMP/sysDesc", "CISCO/model"); exit(0); } include('cisco_func.inc'); os = get_kb_item("SNMP/sysDesc"); if(!os)exit(0); hardware = get_kb_item("CISCO/model"); if(!hardware)exit(0); version = extract_version(os); if ( ! version ) exit(0); # 12.0 if ( deprecated_version(version, "12.0", "12.0SC", "12.0T", "12.0XA", "12.0XC", "12.0XD", "12.0XE", "12.0XG", "12.0XH", "12.0XI", "12.0XJ", "12.0XK", "12.0XL", "12.0XN", "12.0XR") ) vuln ++; if ( check_release(version:version, patched:make_list("12.0(28)S6", "12.0(30)S5", "12.0(31)S3", "12.0(32)S"), newest:"12.0(32)S") ) vuln ++; # 12.1 if ( deprecated_version(version, "12.1", "12.1AA", "12.1EC", "12.1EX", "12.1EZ", "12.1GA", "12.1GB", "12.1T", "12.1XA", "12.1XD", "12.1XH", "12.1XI", "12.1XL", "12.1XM", "12.1XQ", "12.1XS", "12.1XU", "12.1XW", "12.1XX", "12.1XY", "12.1XZ", "12.1YA", "12.1YB", "12.1YD" ) ) vuln ++; if ( check_release(version:version, patched:make_list("12.1(26)E5"), newest:"12.1(26)E5") ) vuln ++; # 12.2 if ( deprecated_version(version, "12.2B", "12.2BC", "12.2BW", "12.2CX", "12.2DD", "12.2DX", "12.2MC", "12.2SU", "12.2SY", "12.2SZ", "12.2T", "12.2XA", "12.2XB", "12.2XC", "12.2XF", "12.2XG", "12.2XK", "12.2XL", "12.2XS", "12.2XT", "12.2XV", "12.2YD", "12.2YE", "12.2YN", "12.2YT", "12.2YW", "12.2YX", "12.2YY", "12.2YZ", "12.2ZA", "12.2ZB", "12.2ZD", "12.2ZE", "12.2ZJ", "12.2ZN") ) vuln ++; if ( check_release(version:version, patched:make_list("12.2(32)"), newest:"12.2(32)") ) vuln ++; if ( check_release(version:version, patched:make_list("12.2(14)S16", "12.2(18)S"), newest:"12.2(18)S") ) vuln ++; # # 12.3 # if ( deprecated_version(version, "12.3B", "12.3BW", "12.3XB", "12.3XD", "12.3XF", "12.3XH", "12.3XJ", "12.3XM", "12.3XQ", "12.3XU", "12.3XW", "12.3YF", "12.3YJ", "12.3YT", "12.3YU") ) vuln ++; if ( check_release(version:version, patched:make_list("12.3(16)"), newest:"12.3(16)") ) vuln ++; if ( check_release(version:version, patched:make_list("12.3(13a)BC"), newest:"12.3(13a)BC") ) vuln ++; if ( check_release(version:version, patched:make_list("12.3(11)T9", "12.3(14)T6"), newest:"12.3(14)T6") ) vuln ++; if ( check_release(version:version, patched:make_list("12.3(14)YM4"), newest:"12.3(14)YM4") ) vuln ++; if ( check_release(version:version, patched:make_list("12.3(14)YQ2"), newest:"12.3(14)YQ2") ) vuln ++; if ( check_release(version:version, patched:make_list("12.3(14)YX"), newest:"12.3(14)YX") ) vuln ++; # 12.4 if ( check_release(version:version, patched:make_list("12.4(1b)", "12.4(3)"), newest:"12.4(3)") ) vuln ++; if ( check_release(version:version, patched:make_list("12.4(2)MR"), newest:"12.4(4)MR") ) vuln ++; if ( check_release(version:version, patched:make_list("12.4(2)T3", "12.4(4)T"), newest:"12.4(4)T") ) vuln ++; if ( check_release(version:version, patched:make_list("12.4(2)XA"), newest:"12.4(2)XA") ) vuln ++; if ( check_release(version:version, patched:make_list("12.4(2)XB"), newest:"12.4(2)XB") ) vuln ++; if ( vuln == 1 ) security_warning(port:161, proto:"udp"); else if ( vuln > 1 ) display("IOS version ", version, " identified as vulnerable by multiple checks\n");

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

Common Attack Pattern Enumeration and Classification (CAPEC)

Nessus

References