Cisco routers and code execution with IP options DoS
Published:		24.01.2007
Source:		FULL-DISCLOSURE
SecurityVulns ID:		7107
Type:		remote
Level:		10/10
Description:		ICMP, UDP or TCP packets with some IP options set can cause device reload and potentially code execution.

Affected:		CISCO : IOS 12.0
		CISCO : IOS 12.1
		CISCO : IOS 12.2
		CISCO : IOS 12.3
		CISCO : IOS XR 3.2
		CISCO : IOS XR 3.4
CVE:		CVE-2007-0480 (Cisco IOS 9.x, 10.x, 11.x, and 12.x and IOS XR 2.0.x, 3.0.x, and 3.2.x allows remote attackers to cause a denial of service or execute arbitrary code via a crafted IP option in the IP header in a (1) ICMP, (2) PIMv2, (3) PGM, or (4) URD packet.)

Original document

CISCO, [Full-disclosure] Cisco Security Advisory: Crafted IP Option Vulnerability (24.01.2007)

Discuss:

Read or add your comments to this news (0 comments)