CVE-2008-3806

2008-09-2616:21:00

NVD-CWE-noinfo

[email protected]

web.nvd.nist.gov

cisco

ios

udp

denial of service

cve-2008-3806

7 High

AI Score

Confidence

Low

8.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:P/A:C

0.008 Low

EPSS

Percentile

82.1%

JSON

Cisco IOS 12.0 through 12.4 on Cisco 10000, uBR10012 and uBR7200 series devices handles external UDP packets that are sent to 127.0.0.0/8 addresses intended for IPC communication within the device, which allows remote attackers to cause a denial of service (device or linecard reload) via crafted UDP packets, a different vulnerability than CVE-2008-3805.

CPENameOperatorVersion
cisco:ioscisco ioseq12.3bc
cisco:ioscisco ioseq12.0st
cisco:ioscisco ioseq12.3xi
cisco:ioscisco ioseq12.2zx
cisco:ioscisco ioseq12.3t
cisco:ioscisco ioseq12.2sca
cisco:ioscisco ioseq12.0sl
cisco:ioscisco ioseq12.2sb
cisco:ioscisco ioseq12.4
cisco:ioscisco ioseq12.0s

CPE	Name	Operator	Version
cisco:ios	cisco ios	eq	12.3bc
cisco:ios	cisco ios	eq	12.0st
cisco:ios	cisco ios	eq	12.3xi
cisco:ios	cisco ios	eq	12.2zx
cisco:ios	cisco ios	eq	12.3t
cisco:ios	cisco ios	eq	12.2sca
cisco:ios	cisco ios	eq	12.0sl
cisco:ios	cisco ios	eq	12.2sb
cisco:ios	cisco ios	eq	12.4
cisco:ios	cisco ios	eq	12.0s