CERTA-2005-AVI-309
Vulnerability from certfr_avis - Published: 2005-08-11 - Updated: 2005-08-11None
Description
Une vulnérabilité dans la mise en œuvre du protocole IPv6 des IOS Cisco permet à un utilisateur distant mal intentionné de provoquer un déni de service ou d'exécuter du code arbitraire par le biais d'un paquet IPv6 malicieusement construit.
Contournement provisoire
Désactiver le support de l'IPv6 sur l'équipement.
Solution
Se référer au bulletin de sécurité Cisco pour appliquer le correctif approprié (cf. Documentation).
La plupart des équipements Cisco qui disposent d'un IOS. Pour savoir si le système est affecté, se référer au bulletin de sécurité Cisco (cf. Documentation).
Impacted products
| Vendor | Product | Description |
|---|
References
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [],
"affected_systems_content": "\u003cp\u003eLa plupart des \u00e9quipements Cisco qui disposent d\u0027un IOS. Pour savoir si le syst\u00e8me est affect\u00e9, se r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 Cisco (cf. \u003cTT\u003eDocumentation\u003c/TT\u003e).\u003c/p\u003e",
"content": "## Description\n\nUne vuln\u00e9rabilit\u00e9 dans la mise en \u0153uvre du protocole IPv6 des IOS Cisco\npermet \u00e0 un utilisateur distant mal intentionn\u00e9 de provoquer un d\u00e9ni de\nservice ou d\u0027ex\u00e9cuter du code arbitraire par le biais d\u0027un paquet IPv6\nmalicieusement construit.\n\n## Contournement provisoire\n\nD\u00e9sactiver le support de l\u0027IPv6 sur l\u0027\u00e9quipement.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 Cisco pour appliquer le correctif\nappropri\u00e9 (cf. Documentation).\n",
"cves": [],
"initial_release_date": "2005-08-11T00:00:00",
"last_revision_date": "2005-08-11T00:00:00",
"links": [],
"reference": "CERTA-2005-AVI-309",
"revisions": [
{
"description": "version initiale.",
"revision_date": "2005-08-11T00:00:00.000000"
}
],
"risks": [
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "D\u00e9ni de service"
}
],
"summary": null,
"title": "Vuln\u00e9rabilit\u00e9 de la pile IPv6 des \u00e9quipements Cisco",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Cisco 65783 du 29 juillet 2005",
"url": "http://www.cisco.com/warp/public/707/cisco-sa-20050729-ipv6.shtml"
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…