CVE-2008-3805

Common vulnerabilities & exposures (CVE)

CVE database CVE database blogpost Release & EoL database

Published at: - 26-09-2008 06:21

Last modified: - 02-06-2022 07:17

Total changes: - 2

Description

Cisco IOS 12.0 through 12.4 on Cisco 10000, uBR10012 and uBR7200 series devices handles external UDP packets that are sent to 127.0.0.0/8 addresses intended for IPC communication within the device, which allows remote attackers to cause a denial of service (device or linecard reload) via crafted UDP packets, a different vulnerability than CVE-2008-3806.

Common Vulnerability Scoring System (CVSS)

AV:N/AC:L/Au:N/C:N/I:P/A:C

Low

Attack complexity

Network

Attack vector

High

Availability

None

Confidentiality

Low

Integrity

Privileges required

Scope

User interaction

8.5

Base score

10.0

7.8

Exploitability score

Impact score

Verification logic

vendor=cisco AND product=ios AND version=12.3bc

vendor=cisco AND product=ios AND version=12.2ca

vendor=cisco AND product=ios AND version=12.2b

vendor=cisco AND product=ios AND version=12.3xi

vendor=cisco AND product=ios AND version=12.2zx

vendor=cisco AND product=ios AND version=12.3t

vendor=cisco AND product=ios AND version=12.2t

vendor=cisco AND product=ios AND version=12.4

vendor=cisco AND product=ios AND version=12.2l

vendor=cisco AND product=ios AND version=12.2rc

vendor=cisco AND product=ios AND version=12.2s

Reference

http://tools.cisco.com/security/center/viewAlert.x?alertId=16646
20080924 Cisco 10000, uBR10012, uBR7200 Series Devices IPC Vulnerability-Vendor Advisory
31990-Third Party Advisory
ADV-2008-2670-Permissions Required
1020935-Broken Link, Third Party Advisory, VDB Entry
oval:org.mitre.oval:def:5910-Broken Link

Keywords

CVE-2008-3805

Common vulnerabilities & exposures (CVE)

Description

Common Vulnerability Scoring System (CVSS)

Verification logic

Reference

NVD

CVE-2008-3805

CVE

Common vulnerabilities & exposures

CVSS

Common vulnerability scoring system

Security

Vulnerabilities

Exposures