Lucene search
+L

Cisco IOS <= 12.3 Show IP BGP Regexp Remote Denial of Service Vulnerability

🗓️ 01 Jul 2014 00:00:00Reported by RootType 
seebug
 seebug
🔗 www.seebug.org👁 27 Views

Cisco IOS <= 12.3 BGP Regexp Remote Denial of Service Vulnerabilit

Code

                                                source: http://www.securityfocus.com/bid/25352/info

Cisco IOS is prone to a remote denial-of-service vulnerability because the software fails to properly handle certain CLI commands.

To issue commands that trigger this vulnerability, attackers must be able to successfully authenticate to vulnerable devices. This may be achieved through remote anonymous means or by sending specially crafted input to web interfaces such as &#39;Looking Glass&#39; web applications.

Successfully exploiting this issue allows attackers to trigger device reboots, denying service to legitimate users.

This issue is documented as Cisco bug ID CSCsb08386.

Cisco IOS releases in the 12.0, 12.1, 12.2, 12.3, and 12.4 ranges are vulnerable to this issue. 

show ip bgp regexp (.*)(_\1)+
show ip bgp regexp ([0-9]*)(_\1)+ 
                              

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

01 Jul 2014 00:00Current
7.1High risk
Vulners AI Score7.1
27