CERTA-2003-AVI-114
Vulnerability from certfr_avis - Published: - Updated:
Une vulnérabilité présente dans les CISCO IOS permet à un utilisateur distant mal intentionné d'effectuer un déni de service sur les équipements vulnérables.
Description
Une mauvaise gestion dans le traitement des paquets IPv4 permet, par le biais de paquets judicieusements composés, d'interrompre le traitement du trafic sur les CISCO IOS.
Solution
Se référer au bulletin de sécurité Cisco (cf. section Documentation) pour l'obtention d'un correctif.
Systèmes fonctionnant sous CISCO IOS et configurés pour le traitement des paquets IPv4.
Impacted products
| Vendor | Product | Description |
|---|
References
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [],
"affected_systems_content": "\u003cP\u003eSyst\u00e8mes fonctionnant sous CISCO IOS et configur\u00e9s pour le traitement des paquets IPv4.\u003c/P\u003e",
"content": "## Description\n\nUne mauvaise gestion dans le traitement des paquets IPv4 permet, par le\nbiais de paquets judicieusements compos\u00e9s, d\u0027interrompre le traitement\ndu trafic sur les CISCO IOS.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 Cisco (cf. section Documentation)\npour l\u0027obtention d\u0027un correctif.\n",
"cves": [],
"links": [],
"reference": "CERTA-2003-AVI-114",
"revisions": [
{
"description": "version initiale.",
"revision_date": "2003-07-17T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service"
}
],
"summary": "Une vuln\u00e9rabilit\u00e9 pr\u00e9sente dans les CISCO IOS permet \u00e0 un utilisateur\ndistant mal intentionn\u00e9 d\u0027effectuer un d\u00e9ni de service sur les\n\u00e9quipements vuln\u00e9rables.\n",
"title": "Vuln\u00e9rabilit\u00e9 dans CISCO IOS",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 CISCO",
"url": "http://www.cisco.com/warp/public/707/cisco-sa-20030717-blocked.shtml"
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…