CVE-2008-3805

2008-09-2616:21:00

NVD-CWE-noinfo

[email protected]

web.nvd.nist.gov

cisco

ios

cisco 10000

ubr10012

ubr7200

cve-2008-3805

denial of service

udp

nvd

7 High

AI Score

Confidence

Low

8.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:P/A:C

0.014 Low

EPSS

Percentile

86.2%

JSON

Cisco IOS 12.0 through 12.4 on Cisco 10000, uBR10012 and uBR7200 series devices handles external UDP packets that are sent to 127.0.0.0/8 addresses intended for IPC communication within the device, which allows remote attackers to cause a denial of service (device or linecard reload) via crafted UDP packets, a different vulnerability than CVE-2008-3806.

CPENameOperatorVersion
cisco:ioscisco ioseq12.3bc
cisco:ioscisco ioseq12.2ca
cisco:ioscisco ioseq12.2b
cisco:ioscisco ioseq12.3xi
cisco:ioscisco ioseq12.2zx
cisco:ioscisco ioseq12.3t
cisco:ioscisco ioseq12.2t
cisco:ioscisco ioseq12.4
cisco:ioscisco ioseq12.2l
cisco:ioscisco ioseq12.2rc

CPE	Name	Operator	Version
cisco:ios	cisco ios	eq	12.3bc
cisco:ios	cisco ios	eq	12.2ca
cisco:ios	cisco ios	eq	12.2b
cisco:ios	cisco ios	eq	12.3xi
cisco:ios	cisco ios	eq	12.2zx
cisco:ios	cisco ios	eq	12.3t
cisco:ios	cisco ios	eq	12.2t
cisco:ios	cisco ios	eq	12.4
cisco:ios	cisco ios	eq	12.2l
cisco:ios	cisco ios	eq	12.2rc