Search
Find a vulnerability
Search criteria
4 vulnerabilities by extended_interior_gateway_routing_protocol
CVE-2005-4437 (GCVE-0-2005-4437)
Vulnerability from nvd – Published: 2005-12-21 01:00 – Updated: 2024-08-07 23:46
VLAI
Summary
MD5 Neighbor Authentication in Extended Interior Gateway Routing Protocol (EIGRP) 1.2, as implemented in Cisco IOS 11.3 and later, does not include the Message Authentication Code (MAC) in the checksum, which allows remote attackers to sniff message hashes and (1) replay EIGRP HELLO messages or (2) cause a denial of service by sending a large number of spoofed EIGRP neighbor announcements, which results in an ARP storm on the local network.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
9 references
| URL | Tags |
|---|---|
| http://www.vupen.com/english/advisories/2005/3008 | vdb-entryx_refsource_VUPEN |
| http://www.securityfocus.com/archive/1/419830/100… | mailing-listx_refsource_BUGTRAQ |
| http://www.securityfocus.com/bid/15970 | vdb-entryx_refsource_BID |
| https://oval.cisecurity.org/repository/search/def… | vdb-entrysignaturex_refsource_OVAL |
| http://www.securityfocus.com/archive/1/419898/100… | mailing-listx_refsource_BUGTRAQ |
| http://securityreason.com/securityalert/274 | third-party-advisoryx_refsource_SREASON |
| http://marc.info/?l=full-disclosure&m=11350445152… | mailing-listx_refsource_FULLDISC |
| http://securitytracker.com/id?1015382 | vdb-entryx_refsource_SECTRACK |
| http://lists.grok.org.uk/pipermail/full-disclosur… | mailing-listx_refsource_FULLDISC |
Date Public
2005-12-19 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T23:46:04.565Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "ADV-2005-3008",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2005/3008"
},
{
"name": "20051219 Authenticated EIGRP DoS / Information leak",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/419830/100/0/threaded"
},
{
"name": "15970",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/15970"
},
{
"name": "oval:org.mitre.oval:def:5741",
"tags": [
"vdb-entry",
"signature",
"x_refsource_OVAL",
"x_transferred"
],
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5741"
},
{
"name": "20051220 Re: Unauthenticated EIGRP DoS",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/419898/100/0/threaded"
},
{
"name": "274",
"tags": [
"third-party-advisory",
"x_refsource_SREASON",
"x_transferred"
],
"url": "http://securityreason.com/securityalert/274"
},
{
"name": "20051220 RE: Authenticated EIGRP DoS / Information leak",
"tags": [
"mailing-list",
"x_refsource_FULLDISC",
"x_transferred"
],
"url": "http://marc.info/?l=full-disclosure\u0026m=113504451523186\u0026w=2"
},
{
"name": "1015382",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://securitytracker.com/id?1015382"
},
{
"name": "20051219 Authenticated EIGRP DoS / Information leak",
"tags": [
"mailing-list",
"x_refsource_FULLDISC",
"x_transferred"
],
"url": "http://lists.grok.org.uk/pipermail/full-disclosure/2005-December/040332.html"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2005-12-19T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "MD5 Neighbor Authentication in Extended Interior Gateway Routing Protocol (EIGRP) 1.2, as implemented in Cisco IOS 11.3 and later, does not include the Message Authentication Code (MAC) in the checksum, which allows remote attackers to sniff message hashes and (1) replay EIGRP HELLO messages or (2) cause a denial of service by sending a large number of spoofed EIGRP neighbor announcements, which results in an ARP storm on the local network."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-10-19T14:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "ADV-2005-3008",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2005/3008"
},
{
"name": "20051219 Authenticated EIGRP DoS / Information leak",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/419830/100/0/threaded"
},
{
"name": "15970",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/15970"
},
{
"name": "oval:org.mitre.oval:def:5741",
"tags": [
"vdb-entry",
"signature",
"x_refsource_OVAL"
],
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5741"
},
{
"name": "20051220 Re: Unauthenticated EIGRP DoS",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/419898/100/0/threaded"
},
{
"name": "274",
"tags": [
"third-party-advisory",
"x_refsource_SREASON"
],
"url": "http://securityreason.com/securityalert/274"
},
{
"name": "20051220 RE: Authenticated EIGRP DoS / Information leak",
"tags": [
"mailing-list",
"x_refsource_FULLDISC"
],
"url": "http://marc.info/?l=full-disclosure\u0026m=113504451523186\u0026w=2"
},
{
"name": "1015382",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://securitytracker.com/id?1015382"
},
{
"name": "20051219 Authenticated EIGRP DoS / Information leak",
"tags": [
"mailing-list",
"x_refsource_FULLDISC"
],
"url": "http://lists.grok.org.uk/pipermail/full-disclosure/2005-December/040332.html"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2005-4437",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "MD5 Neighbor Authentication in Extended Interior Gateway Routing Protocol (EIGRP) 1.2, as implemented in Cisco IOS 11.3 and later, does not include the Message Authentication Code (MAC) in the checksum, which allows remote attackers to sniff message hashes and (1) replay EIGRP HELLO messages or (2) cause a denial of service by sending a large number of spoofed EIGRP neighbor announcements, which results in an ARP storm on the local network."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "ADV-2005-3008",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2005/3008"
},
{
"name": "20051219 Authenticated EIGRP DoS / Information leak",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/419830/100/0/threaded"
},
{
"name": "15970",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/15970"
},
{
"name": "oval:org.mitre.oval:def:5741",
"refsource": "OVAL",
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5741"
},
{
"name": "20051220 Re: Unauthenticated EIGRP DoS",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/419898/100/0/threaded"
},
{
"name": "274",
"refsource": "SREASON",
"url": "http://securityreason.com/securityalert/274"
},
{
"name": "20051220 RE: Authenticated EIGRP DoS / Information leak",
"refsource": "FULLDISC",
"url": "http://marc.info/?l=full-disclosure\u0026m=113504451523186\u0026w=2"
},
{
"name": "1015382",
"refsource": "SECTRACK",
"url": "http://securitytracker.com/id?1015382"
},
{
"name": "20051219 Authenticated EIGRP DoS / Information leak",
"refsource": "FULLDISC",
"url": "http://lists.grok.org.uk/pipermail/full-disclosure/2005-December/040332.html"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2005-4437",
"datePublished": "2005-12-21T01:00:00.000Z",
"dateReserved": "2005-12-21T00:00:00.000Z",
"dateUpdated": "2024-08-07T23:46:04.565Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2002-2208 (GCVE-0-2002-2208)
Vulnerability from nvd – Published: 2005-12-21 01:00 – Updated: 2024-08-08 03:51
VLAI
Summary
Extended Interior Gateway Routing Protocol (EIGRP), as implemented in Cisco IOS 11.3 through 12.2 and other products, allows remote attackers to cause a denial of service (flood) by sending a large number of spoofed EIGRP neighbor announcements, which results in an ARP storm on the local network.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
12 references
| URL | Tags |
|---|---|
| http://www.osvdb.org/18055 | vdb-entryx_refsource_OSVDB |
| http://www.securityfocus.com/archive/1/304044 | mailing-listx_refsource_BUGTRAQ |
| http://www.securityfocus.com/bid/6443 | vdb-entryx_refsource_BID |
| http://www.cisco.com/en/US/tech/tk365/technologie… | vendor-advisoryx_refsource_CISCO |
| http://secunia.com/advisories/7766 | third-party-advisoryx_refsource_SECUNIA |
| http://securitytracker.com/id?1005840 | vdb-entryx_refsource_SECTRACK |
| http://www.securityfocus.com/archive/1/304034 | mailing-listx_refsource_BUGTRAQ |
| http://www.cisco.com/warp/public/707/eigrp_issue.pdf | x_refsource_CONFIRM |
| http://www.securityfocus.com/archive/1/419898/100… | mailing-listx_refsource_BUGTRAQ |
| http://lists.grok.org.uk/pipermail/full-disclosur… | mailing-listx_refsource_FULLDISC |
| http://marc.info/?l=full-disclosure&m=11350445152… | mailing-listx_refsource_FULLDISC |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
Date Public
2002-12-19 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-08T03:51:17.690Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "18055",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/18055"
},
{
"name": "20021219 Re: Cisco IOS EIGRP Network DoS",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/304044"
},
{
"name": "6443",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/6443"
},
{
"name": "20021220 Cisco\u0027s Response to the EIGRP Issue",
"tags": [
"vendor-advisory",
"x_refsource_CISCO",
"x_transferred"
],
"url": "http://www.cisco.com/en/US/tech/tk365/technologies_security_notice09186a008011c5e1.html"
},
{
"name": "7766",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/7766"
},
{
"name": "1005840",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://securitytracker.com/id?1005840"
},
{
"name": "20021219 Cisco IOS EIGRP Network DoS",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/304034"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.cisco.com/warp/public/707/eigrp_issue.pdf"
},
{
"name": "20051220 Re: Unauthenticated EIGRP DoS",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/419898/100/0/threaded"
},
{
"name": "20051219 Unauthenticated EIGRP DoS",
"tags": [
"mailing-list",
"x_refsource_FULLDISC",
"x_transferred"
],
"url": "http://lists.grok.org.uk/pipermail/full-disclosure/2005-December/040330.html"
},
{
"name": "20051220 RE: Authenticated EIGRP DoS / Information leak",
"tags": [
"mailing-list",
"x_refsource_FULLDISC",
"x_transferred"
],
"url": "http://marc.info/?l=full-disclosure\u0026m=113504451523186\u0026w=2"
},
{
"name": "cisco-ios-eigrp-dos(10903)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/10903"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2002-12-19T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Extended Interior Gateway Routing Protocol (EIGRP), as implemented in Cisco IOS 11.3 through 12.2 and other products, allows remote attackers to cause a denial of service (flood) by sending a large number of spoofed EIGRP neighbor announcements, which results in an ARP storm on the local network."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-10-19T14:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "18055",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/18055"
},
{
"name": "20021219 Re: Cisco IOS EIGRP Network DoS",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/304044"
},
{
"name": "6443",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/6443"
},
{
"name": "20021220 Cisco\u0027s Response to the EIGRP Issue",
"tags": [
"vendor-advisory",
"x_refsource_CISCO"
],
"url": "http://www.cisco.com/en/US/tech/tk365/technologies_security_notice09186a008011c5e1.html"
},
{
"name": "7766",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/7766"
},
{
"name": "1005840",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://securitytracker.com/id?1005840"
},
{
"name": "20021219 Cisco IOS EIGRP Network DoS",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/304034"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.cisco.com/warp/public/707/eigrp_issue.pdf"
},
{
"name": "20051220 Re: Unauthenticated EIGRP DoS",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/419898/100/0/threaded"
},
{
"name": "20051219 Unauthenticated EIGRP DoS",
"tags": [
"mailing-list",
"x_refsource_FULLDISC"
],
"url": "http://lists.grok.org.uk/pipermail/full-disclosure/2005-December/040330.html"
},
{
"name": "20051220 RE: Authenticated EIGRP DoS / Information leak",
"tags": [
"mailing-list",
"x_refsource_FULLDISC"
],
"url": "http://marc.info/?l=full-disclosure\u0026m=113504451523186\u0026w=2"
},
{
"name": "cisco-ios-eigrp-dos(10903)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/10903"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2002-2208",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Extended Interior Gateway Routing Protocol (EIGRP), as implemented in Cisco IOS 11.3 through 12.2 and other products, allows remote attackers to cause a denial of service (flood) by sending a large number of spoofed EIGRP neighbor announcements, which results in an ARP storm on the local network."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "18055",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/18055"
},
{
"name": "20021219 Re: Cisco IOS EIGRP Network DoS",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/304044"
},
{
"name": "6443",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/6443"
},
{
"name": "20021220 Cisco\u0027s Response to the EIGRP Issue",
"refsource": "CISCO",
"url": "http://www.cisco.com/en/US/tech/tk365/technologies_security_notice09186a008011c5e1.html"
},
{
"name": "7766",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/7766"
},
{
"name": "1005840",
"refsource": "SECTRACK",
"url": "http://securitytracker.com/id?1005840"
},
{
"name": "20021219 Cisco IOS EIGRP Network DoS",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/304034"
},
{
"name": "http://www.cisco.com/warp/public/707/eigrp_issue.pdf",
"refsource": "CONFIRM",
"url": "http://www.cisco.com/warp/public/707/eigrp_issue.pdf"
},
{
"name": "20051220 Re: Unauthenticated EIGRP DoS",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/419898/100/0/threaded"
},
{
"name": "20051219 Unauthenticated EIGRP DoS",
"refsource": "FULLDISC",
"url": "http://lists.grok.org.uk/pipermail/full-disclosure/2005-December/040330.html"
},
{
"name": "20051220 RE: Authenticated EIGRP DoS / Information leak",
"refsource": "FULLDISC",
"url": "http://marc.info/?l=full-disclosure\u0026m=113504451523186\u0026w=2"
},
{
"name": "cisco-ios-eigrp-dos(10903)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/10903"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2002-2208",
"datePublished": "2005-12-21T01:00:00.000Z",
"dateReserved": "2005-12-21T00:00:00.000Z",
"dateUpdated": "2024-08-08T03:51:17.690Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2005-4437 (GCVE-0-2005-4437)
Vulnerability from cvelistv5 – Published: 2005-12-21 01:00 – Updated: 2024-08-07 23:46
VLAI
Summary
MD5 Neighbor Authentication in Extended Interior Gateway Routing Protocol (EIGRP) 1.2, as implemented in Cisco IOS 11.3 and later, does not include the Message Authentication Code (MAC) in the checksum, which allows remote attackers to sniff message hashes and (1) replay EIGRP HELLO messages or (2) cause a denial of service by sending a large number of spoofed EIGRP neighbor announcements, which results in an ARP storm on the local network.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
9 references
| URL | Tags |
|---|---|
| http://www.vupen.com/english/advisories/2005/3008 | vdb-entryx_refsource_VUPEN |
| http://www.securityfocus.com/archive/1/419830/100… | mailing-listx_refsource_BUGTRAQ |
| http://www.securityfocus.com/bid/15970 | vdb-entryx_refsource_BID |
| https://oval.cisecurity.org/repository/search/def… | vdb-entrysignaturex_refsource_OVAL |
| http://www.securityfocus.com/archive/1/419898/100… | mailing-listx_refsource_BUGTRAQ |
| http://securityreason.com/securityalert/274 | third-party-advisoryx_refsource_SREASON |
| http://marc.info/?l=full-disclosure&m=11350445152… | mailing-listx_refsource_FULLDISC |
| http://securitytracker.com/id?1015382 | vdb-entryx_refsource_SECTRACK |
| http://lists.grok.org.uk/pipermail/full-disclosur… | mailing-listx_refsource_FULLDISC |
Date Public
2005-12-19 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T23:46:04.565Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "ADV-2005-3008",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2005/3008"
},
{
"name": "20051219 Authenticated EIGRP DoS / Information leak",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/419830/100/0/threaded"
},
{
"name": "15970",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/15970"
},
{
"name": "oval:org.mitre.oval:def:5741",
"tags": [
"vdb-entry",
"signature",
"x_refsource_OVAL",
"x_transferred"
],
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5741"
},
{
"name": "20051220 Re: Unauthenticated EIGRP DoS",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/419898/100/0/threaded"
},
{
"name": "274",
"tags": [
"third-party-advisory",
"x_refsource_SREASON",
"x_transferred"
],
"url": "http://securityreason.com/securityalert/274"
},
{
"name": "20051220 RE: Authenticated EIGRP DoS / Information leak",
"tags": [
"mailing-list",
"x_refsource_FULLDISC",
"x_transferred"
],
"url": "http://marc.info/?l=full-disclosure\u0026m=113504451523186\u0026w=2"
},
{
"name": "1015382",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://securitytracker.com/id?1015382"
},
{
"name": "20051219 Authenticated EIGRP DoS / Information leak",
"tags": [
"mailing-list",
"x_refsource_FULLDISC",
"x_transferred"
],
"url": "http://lists.grok.org.uk/pipermail/full-disclosure/2005-December/040332.html"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2005-12-19T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "MD5 Neighbor Authentication in Extended Interior Gateway Routing Protocol (EIGRP) 1.2, as implemented in Cisco IOS 11.3 and later, does not include the Message Authentication Code (MAC) in the checksum, which allows remote attackers to sniff message hashes and (1) replay EIGRP HELLO messages or (2) cause a denial of service by sending a large number of spoofed EIGRP neighbor announcements, which results in an ARP storm on the local network."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-10-19T14:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "ADV-2005-3008",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2005/3008"
},
{
"name": "20051219 Authenticated EIGRP DoS / Information leak",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/419830/100/0/threaded"
},
{
"name": "15970",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/15970"
},
{
"name": "oval:org.mitre.oval:def:5741",
"tags": [
"vdb-entry",
"signature",
"x_refsource_OVAL"
],
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5741"
},
{
"name": "20051220 Re: Unauthenticated EIGRP DoS",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/419898/100/0/threaded"
},
{
"name": "274",
"tags": [
"third-party-advisory",
"x_refsource_SREASON"
],
"url": "http://securityreason.com/securityalert/274"
},
{
"name": "20051220 RE: Authenticated EIGRP DoS / Information leak",
"tags": [
"mailing-list",
"x_refsource_FULLDISC"
],
"url": "http://marc.info/?l=full-disclosure\u0026m=113504451523186\u0026w=2"
},
{
"name": "1015382",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://securitytracker.com/id?1015382"
},
{
"name": "20051219 Authenticated EIGRP DoS / Information leak",
"tags": [
"mailing-list",
"x_refsource_FULLDISC"
],
"url": "http://lists.grok.org.uk/pipermail/full-disclosure/2005-December/040332.html"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2005-4437",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "MD5 Neighbor Authentication in Extended Interior Gateway Routing Protocol (EIGRP) 1.2, as implemented in Cisco IOS 11.3 and later, does not include the Message Authentication Code (MAC) in the checksum, which allows remote attackers to sniff message hashes and (1) replay EIGRP HELLO messages or (2) cause a denial of service by sending a large number of spoofed EIGRP neighbor announcements, which results in an ARP storm on the local network."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "ADV-2005-3008",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2005/3008"
},
{
"name": "20051219 Authenticated EIGRP DoS / Information leak",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/419830/100/0/threaded"
},
{
"name": "15970",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/15970"
},
{
"name": "oval:org.mitre.oval:def:5741",
"refsource": "OVAL",
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5741"
},
{
"name": "20051220 Re: Unauthenticated EIGRP DoS",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/419898/100/0/threaded"
},
{
"name": "274",
"refsource": "SREASON",
"url": "http://securityreason.com/securityalert/274"
},
{
"name": "20051220 RE: Authenticated EIGRP DoS / Information leak",
"refsource": "FULLDISC",
"url": "http://marc.info/?l=full-disclosure\u0026m=113504451523186\u0026w=2"
},
{
"name": "1015382",
"refsource": "SECTRACK",
"url": "http://securitytracker.com/id?1015382"
},
{
"name": "20051219 Authenticated EIGRP DoS / Information leak",
"refsource": "FULLDISC",
"url": "http://lists.grok.org.uk/pipermail/full-disclosure/2005-December/040332.html"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2005-4437",
"datePublished": "2005-12-21T01:00:00.000Z",
"dateReserved": "2005-12-21T00:00:00.000Z",
"dateUpdated": "2024-08-07T23:46:04.565Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2002-2208 (GCVE-0-2002-2208)
Vulnerability from cvelistv5 – Published: 2005-12-21 01:00 – Updated: 2024-08-08 03:51
VLAI
Summary
Extended Interior Gateway Routing Protocol (EIGRP), as implemented in Cisco IOS 11.3 through 12.2 and other products, allows remote attackers to cause a denial of service (flood) by sending a large number of spoofed EIGRP neighbor announcements, which results in an ARP storm on the local network.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
12 references
| URL | Tags |
|---|---|
| http://www.osvdb.org/18055 | vdb-entryx_refsource_OSVDB |
| http://www.securityfocus.com/archive/1/304044 | mailing-listx_refsource_BUGTRAQ |
| http://www.securityfocus.com/bid/6443 | vdb-entryx_refsource_BID |
| http://www.cisco.com/en/US/tech/tk365/technologie… | vendor-advisoryx_refsource_CISCO |
| http://secunia.com/advisories/7766 | third-party-advisoryx_refsource_SECUNIA |
| http://securitytracker.com/id?1005840 | vdb-entryx_refsource_SECTRACK |
| http://www.securityfocus.com/archive/1/304034 | mailing-listx_refsource_BUGTRAQ |
| http://www.cisco.com/warp/public/707/eigrp_issue.pdf | x_refsource_CONFIRM |
| http://www.securityfocus.com/archive/1/419898/100… | mailing-listx_refsource_BUGTRAQ |
| http://lists.grok.org.uk/pipermail/full-disclosur… | mailing-listx_refsource_FULLDISC |
| http://marc.info/?l=full-disclosure&m=11350445152… | mailing-listx_refsource_FULLDISC |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
Date Public
2002-12-19 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-08T03:51:17.690Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "18055",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/18055"
},
{
"name": "20021219 Re: Cisco IOS EIGRP Network DoS",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/304044"
},
{
"name": "6443",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/6443"
},
{
"name": "20021220 Cisco\u0027s Response to the EIGRP Issue",
"tags": [
"vendor-advisory",
"x_refsource_CISCO",
"x_transferred"
],
"url": "http://www.cisco.com/en/US/tech/tk365/technologies_security_notice09186a008011c5e1.html"
},
{
"name": "7766",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/7766"
},
{
"name": "1005840",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://securitytracker.com/id?1005840"
},
{
"name": "20021219 Cisco IOS EIGRP Network DoS",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/304034"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.cisco.com/warp/public/707/eigrp_issue.pdf"
},
{
"name": "20051220 Re: Unauthenticated EIGRP DoS",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/419898/100/0/threaded"
},
{
"name": "20051219 Unauthenticated EIGRP DoS",
"tags": [
"mailing-list",
"x_refsource_FULLDISC",
"x_transferred"
],
"url": "http://lists.grok.org.uk/pipermail/full-disclosure/2005-December/040330.html"
},
{
"name": "20051220 RE: Authenticated EIGRP DoS / Information leak",
"tags": [
"mailing-list",
"x_refsource_FULLDISC",
"x_transferred"
],
"url": "http://marc.info/?l=full-disclosure\u0026m=113504451523186\u0026w=2"
},
{
"name": "cisco-ios-eigrp-dos(10903)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/10903"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2002-12-19T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Extended Interior Gateway Routing Protocol (EIGRP), as implemented in Cisco IOS 11.3 through 12.2 and other products, allows remote attackers to cause a denial of service (flood) by sending a large number of spoofed EIGRP neighbor announcements, which results in an ARP storm on the local network."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-10-19T14:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "18055",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/18055"
},
{
"name": "20021219 Re: Cisco IOS EIGRP Network DoS",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/304044"
},
{
"name": "6443",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/6443"
},
{
"name": "20021220 Cisco\u0027s Response to the EIGRP Issue",
"tags": [
"vendor-advisory",
"x_refsource_CISCO"
],
"url": "http://www.cisco.com/en/US/tech/tk365/technologies_security_notice09186a008011c5e1.html"
},
{
"name": "7766",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/7766"
},
{
"name": "1005840",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://securitytracker.com/id?1005840"
},
{
"name": "20021219 Cisco IOS EIGRP Network DoS",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/304034"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.cisco.com/warp/public/707/eigrp_issue.pdf"
},
{
"name": "20051220 Re: Unauthenticated EIGRP DoS",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/419898/100/0/threaded"
},
{
"name": "20051219 Unauthenticated EIGRP DoS",
"tags": [
"mailing-list",
"x_refsource_FULLDISC"
],
"url": "http://lists.grok.org.uk/pipermail/full-disclosure/2005-December/040330.html"
},
{
"name": "20051220 RE: Authenticated EIGRP DoS / Information leak",
"tags": [
"mailing-list",
"x_refsource_FULLDISC"
],
"url": "http://marc.info/?l=full-disclosure\u0026m=113504451523186\u0026w=2"
},
{
"name": "cisco-ios-eigrp-dos(10903)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/10903"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2002-2208",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Extended Interior Gateway Routing Protocol (EIGRP), as implemented in Cisco IOS 11.3 through 12.2 and other products, allows remote attackers to cause a denial of service (flood) by sending a large number of spoofed EIGRP neighbor announcements, which results in an ARP storm on the local network."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "18055",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/18055"
},
{
"name": "20021219 Re: Cisco IOS EIGRP Network DoS",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/304044"
},
{
"name": "6443",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/6443"
},
{
"name": "20021220 Cisco\u0027s Response to the EIGRP Issue",
"refsource": "CISCO",
"url": "http://www.cisco.com/en/US/tech/tk365/technologies_security_notice09186a008011c5e1.html"
},
{
"name": "7766",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/7766"
},
{
"name": "1005840",
"refsource": "SECTRACK",
"url": "http://securitytracker.com/id?1005840"
},
{
"name": "20021219 Cisco IOS EIGRP Network DoS",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/304034"
},
{
"name": "http://www.cisco.com/warp/public/707/eigrp_issue.pdf",
"refsource": "CONFIRM",
"url": "http://www.cisco.com/warp/public/707/eigrp_issue.pdf"
},
{
"name": "20051220 Re: Unauthenticated EIGRP DoS",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/419898/100/0/threaded"
},
{
"name": "20051219 Unauthenticated EIGRP DoS",
"refsource": "FULLDISC",
"url": "http://lists.grok.org.uk/pipermail/full-disclosure/2005-December/040330.html"
},
{
"name": "20051220 RE: Authenticated EIGRP DoS / Information leak",
"refsource": "FULLDISC",
"url": "http://marc.info/?l=full-disclosure\u0026m=113504451523186\u0026w=2"
},
{
"name": "cisco-ios-eigrp-dos(10903)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/10903"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2002-2208",
"datePublished": "2005-12-21T01:00:00.000Z",
"dateReserved": "2005-12-21T00:00:00.000Z",
"dateUpdated": "2024-08-08T03:51:17.690Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}