Cisco Wireless LAN Controller (WLC) Malformed Ethernet Traffic DoS

2007-04-12T05:19:03
ID OSVDB:34135
Type osvdb
Reporter OSVDB
Modified 2007-04-12T05:19:03

Description

Vulnerability Description

Wireless LAN Controller contains a flaw that may allow a remote denial of service. The issue is triggered by malformed Ethernet traffic on the local network, and will result in loss of availability for the platform.

Solution Description

Upgrade to version 3.2.116.21 or 4.0.155.0 or higher, as they have been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

Short Description

Wireless LAN Controller contains a flaw that may allow a remote denial of service. The issue is triggered by malformed Ethernet traffic on the local network, and will result in loss of availability for the platform.

References:

Vendor Specific Advisory URL Security Tracker: 1017908 Secunia Advisory ID:24865 Related OSVDB ID: 34131 Related OSVDB ID: 34138 Related OSVDB ID: 34129 Related OSVDB ID: 34130 Related OSVDB ID: 34132 Related OSVDB ID: 34134 Related OSVDB ID: 34133 Related OSVDB ID: 34136 Related OSVDB ID: 34137 Mail List Post: http://archives.neohapsis.com/archives/bugtraq/2007-04/0192.html Keyword: CSCsc90179 ISS X-Force ID: 33607 FrSIRT Advisory: ADV-2007-1368 CVE-2007-2037 Bugtraq ID: 23461