CVE-2009-2049

Cisco IOS 12.032S12 through 12.032S13 and 12.033S3 through 12.033S4, 12.032SY8 through 12.032SY9, 12.233SXI1 through 12.233SXI2, 12.2XNC before 12.233XNC2, 12.2XND before 12.233XND1, and 12.424T1; and IOS XE 2.3 through 2.3.1t and 2.4 through 2.4.0; when RFC4893 BGP routing is enabled, allows...

CVE-2009-2049

CVE-2009-2049 covers Cisco IOS/IOS XE with RFC4893 BGP enabled. A remote attacker can trigger a device reload by sending a malformed BGP update from a 4‑byte AS speaker to a 2‑byte AS speaker (Bug CSCta33973). Affects multiple releases across 12.x trains and IOS XE 2.3–2.4; exploitation leads to ...

Cisco IOS畸形边界网关协议更新拒绝服务漏洞

Bugraq ID: 35860 CVE ID：CVE-2009-2049 Cisco IOS是一款流行的Internet操作系统。 Cisco IOS处理边界网关协议存在拒绝服务攻击，远程攻击者可以利用漏洞使设备重启。 当受影响设备处理畸形BGP更新时可使设备重载。 成功利用此漏洞需要3个条件： -受影响的Cisco IOS软件设备为4字节AS自治号BGP Speaker -BGP对等邻居为2字节AS自治号BGP Speaker -BGP对等邻居能发送特殊构建的非RFC适应的BGP更新消息 此漏洞Cisco Bug ID为CSCta33973，CVEID为CVE-2009-2049。...