Cisco IOS 12.0 through 12.4 on Cisco 10000, uBR10012 and...
Vulnerability Description
Cisco IOS 12.0 through 12.4 on Cisco 10000, uBR10012 and uBR7200 series devices handles external UDP packets that are sent to 127.0.0.0/8 addresses intended for IPC communication within the device, which allows remote attackers to cause a denial of service (device or linecard reload) via crafted UDP packets, a different vulnerability than CVE-2008-3805.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2008-3806
Credits & Attribution
No credits recorded in the NVD database.
References
- http://secunia.com/advisories/31990
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45592
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080a014ae.shtml
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7123
- http://tools.cisco.com/security/center/viewAlert.x?alertId=16646
More from cisco
View All →Affected Vendor
cisco
View all reports →Affected Software
Timeline
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.