Cisco 6000/6500/7600 series systems with Multilayer Switch Feature Card 2 (MSFC2) fail to properly process layer 2 frames.
Cisco 6000/6500/7600 series systems with MSFC2 contain a vulnerability in the way layer 2 frames are processed in software. By sending a specially crafted layer 2 frame that is inconsistent with the length of the encapsulated layer 3 packet, an attacker could cause the system to freeze or reset. This vulnerability only affects systems with specific hardware/software configurations.
According to the Cisco Advisory, the following systems are affected:
* Cisco 6000/6500/7600 series systems with MSFC2 and a FlexWAN or OSM module * Cisco 6000/6500/7600 series systems with MSFC2 that are running 12.1(8b)E14 are affected even if they do not have a FlexWAN or OSM module.
Note: Cisco 6000/6500/7600 series systems with a Supervisor 720 are not affected by this vulnerability.
Exploitation of this vulnerability could cause a vulnerable system to freeze or reset resulting in a denial-of-service condition. In order to restore functionality, the system would have to be reset.
Cisco has released an advisory "Cisco 6000/6500/7600 Crafted Layer 2 Frame Vulnerability" to address this issue. For information on upgrading, please refer to the "Software Versions and Fixes" section of the Cisco Advisory.
Filter by status: All Affected Not Affected Unknown
Filter by content: __ Vendor has issued information
__ Sort by: Status Alphabetical
Affected Unknown __ Unaffected
Updated: March 31, 2004
No statement is currently available from the vendor regarding this vulnerability.
The vendor has not provided us with any further information regarding this vulnerability.
Please refer to the Cisco Advisory "Cisco 6000/6500/7600 Crafted Layer 2 Frame Vulnerability".
If you have feedback, comments, or additional information about this vulnerability, please send us email.
Group | Score | Vector
Base | N/A | N/A
Temporal | N/A | N/A
Environmental | | N/A
This vulnerability was reported by the Cisco Systems Product Security Incident Response Team (PSIRT).
This document was written by Damon Morda.
CVE IDs:* | CVE-2004-0244
**Severity Metric: | 6.24
*Date Public: | 2004-02-03
Date First Published: | 2004-03-30
Date Last Updated: | 2004-04-05 20:41 UTC
Document Revision: | 32