| ID |
CVE-2008-1153
|
| Summary |
Cisco IOS 12.1, 12.2, 12.3, and 12.4, with IPv4 UDP services and the IPv6 protocol enabled, allows remote attackers to cause a denial of service (device crash and possible blocked interface) via a crafted IPv6 packet to the device. |
| References |
|
| Vulnerable Configurations |
-
cpe:2.3:o:cisco:cisco_ios:12.3:*:*:*:*:*:*:*
cpe:2.3:o:cisco:cisco_ios:12.3:*:*:*:*:*:*:*
-
cpe:2.3:o:cisco:cisco_ios:12.4:*:*:*:*:*:*:*
cpe:2.3:o:cisco:cisco_ios:12.4:*:*:*:*:*:*:*
-
cpe:2.3:o:cisco:ios:12.1:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios:12.1:*:*:*:*:*:*:*
-
cpe:2.3:o:cisco:ios:12.2:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios:12.2:*:*:*:*:*:*:*
|
| CVSS |
| Base: | 7.1 (as of 29-09-2017 - 01:30) |
| Impact: | |
| Exploitability: | |
|
| CWE |
NVD-CWE-Other |
| CAPEC |
|
| Access |
| Vector | Complexity | Authentication |
| NETWORK |
MEDIUM |
NONE |
|
| Impact |
| Confidentiality | Integrity | Availability |
| NONE |
NONE |
COMPLETE |
|
| cvss-vector
via4
|
AV:N/AC:M/Au:N/C:N/I:N/A:C
|
| oval
via4
|
| accepted | 2008-09-08T04:00:55.428-04:00 | | class | vulnerability | | contributors | | name | Yuzheng Zhou | | organization | Hewlett-Packard |
| | description | Cisco IOS 12.1, 12.2, 12.3, and 12.4, with IPv4 UDP services and the IPv6 protocol enabled, allows remote attackers to cause a denial of service (device crash and possible blocked interface) via a crafted IPv6 packet to the device. | | family | ios | | id | oval:org.mitre.oval:def:5860 | | status | accepted | | submitted | 2008-05-26T11:06:36.000-04:00 | | title | Cisco IOS UDP for IPv4/IPv6 Unspecified Vulnerability | | version | 3 |
|
| refmap
via4
|
| bid | 28461 | | cert | TA08-087B | | cert-vn | VU#936177 | | cisco | 20080326 Cisco IOS User Datagram Protocol Delivery Issue For IPv4/IPv6 Dual-stack Routers | | sectrack | 1019713 | | secunia | 29507 | | vupen | ADV-2008-1006 | | xf | cisco-ios-ipv6-dualstack-dos(41475) |
|
| Last major update |
29-09-2017 - 01:30 |
| Published |
27-03-2008 - 10:44 |
| Last modified |
29-09-2017 - 01:30 |
