CVE-2009-2872

Severity

68%

Complexity

80%

Confidentiality

115%

Cisco IOS 12.0 through 12.4, when IP-based tunnels and the Cisco Express Forwarding feature are enabled, allows remote attackers to cause a denial of service (device reload) via a malformed packet that is not properly handled during switching from one tunnel to a second tunnel, aka Bug IDs CSCsh97579 and CSCsq31776.

Cisco IOS 12.0 through 12.4, when IP-based tunnels and the Cisco Express Forwarding feature are enabled, allows remote attackers to cause a denial of service (device reload) via a malformed packet that is not properly handled during switching from one tunnel to a second tunnel, aka Bug IDs CSCsh97579 and CSCsq31776.

CVSS 2.0 Base Score 6.8. CVSS Attack Vector: network. CVSS Attack Complexity: low. CVSS Vector: (AV:N/AC:L/Au:S/C:N/I:N/A:C).

Overview

Type

Cisco IOS

First reported 15 years ago

2009-09-28 19:30:00

Last updated 15 years ago

2009-10-01 05:24:00

Affected Software

Cisco IOS 12.0

12.0

Cisco IOS 12.0DA

12.0da

Cisco IOS 12.0DB

12.0db

Cisco IOS 12.0DC

12.0dc

Cisco IOS 12.0S

12.0s

Cisco IOS 12.0SC

12.0sc

Cisco IOS 12.0SL

12.0sl

Cisco IOS 12.0SP

12.0sp

Cisco IOS 12.0ST

12.0st

Cisco IOS 12.0SX

12.0sx

Cisco IOS 12.0SY

12.0sy

Cisco IOS 12.0SZ

12.0sz

Cisco IOS 12.0T

12.0t

Cisco IOS 12.0W

12.0w

Cisco IOS 12.0WC

12.0wc

Cisco IOS 12.0XA

12.0xa

Cisco IOS 12.0XB

12.0xb

Cisco IOS 12.0XC

12.0xc

Cisco IOS 12.0XD

12.0xd

Cisco IOS 12.0XE

12.0xe

Cisco IOS 12.0XG

12.0xg

Cisco IOS 12.0XH

12.0xh

Cisco IOS 12.0XI

12.0xi

Cisco IOS 12.0XJ

12.0xj

Cisco IOS 12.0XK

12.0xk

Cisco IOS 12.0XL

12.0xl

Cisco IOS 12.0XM

12.0xm

Cisco IOS 12.0XN

12.0xn

Cisco IOS 12.0XQ

12.0xq

Cisco IOS 12.0XR

12.0xr

Cisco IOS 12.0XT

12.0xt

Cisco IOS 12.0Xv

12.0xv

Cisco IOS 12.1

12.1

Cisco IOS 12.1AA

12.1aa

Cisco IOS 12.1AX

12.1ax

Cisco IOS 12.1AY

12.1ay

Cisco IOS 12.1CX

12.1cx

Cisco IOS 12.1DA

12.1da

Cisco IOS 12.1DB

12.1db

Cisco IOS 12.1DC

12.1dc

Cisco IOS 12.1E

12.1e

Cisco IOS 12.1EA

12.1ea

Cisco IOS 12.1EB

12.1eb

Cisco IOS 12.1EC

12.1ec

Cisco IOS 12.1EO

12.1eo

Cisco IOS 12.1EU

12.1eu

Cisco IOS 12.1EW

12.1ew

Cisco IOS 12.1EX

12.1ex

Cisco IOS 12.1EY

12.1ey

Cisco IOS 12.1EZ

12.1ez

Cisco IOS 12.1GA

12.1ga

Cisco IOS 12.1GB

12.1gb

Cisco IOS 12.1T

12.1t

Cisco IOS 12.1XA

12.1xa

Cisco IOS 12.1XB

12.1xb

Cisco IOS 12.1XC

12.1xc

Cisco IOS 12.1XD

12.1xd

Cisco IOS 12.1XE

12.1xe

Cisco IOS 12.1XF

12.1xf

Cisco IOS 12.1XG

12.1xg

Cisco IOS 12.1XH

12.1xh

Cisco IOS 12.1XI

12.1xi

Cisco IOS 12.1XJ

12.1xj

Cisco IOS 12.1XL

12.1xl

Cisco IOS 12.1XM

12.1xm

Cisco IOS 12.1XP

12.1xp

Cisco IOS 12.1XQ

12.1xq

Cisco IOS 12.1XR

12.1xr

Cisco IOS 12.1XS

12.1xs

Cisco IOS 12.1XT

12.1xt

Cisco IOS 12.1XU

12.1xu

Cisco IOS 12.1XV

12.1xv

Cisco IOS 12.1XW

12.1xw

Cisco IOS 12.1XX

12.1xx

Cisco IOS 12.1XY

12.1xy

Cisco IOS 12.1XZ

12.1xz

Cisco IOS 12.1YA

12.1ya

Cisco IOS 12.1YB

12.1yb

Cisco IOS 12.1YC

12.1yc

Cisco IOS 12.1YD

12.1yd

Cisco IOS 12.1YE

12.1ye

Cisco IOS 12.1YF

12.1yf

Cisco IOS 12.1YH

12.1yh

Cisco IOS 12.1YI

12.1yi

Cisco IOS 12.2

12.2

Cisco IOS 12.2B

12.2b

Cisco IOS 12.2BC

12.2bc

Cisco IOS 12.2BW

12.2bw

Cisco IOS 12.2BX

12.2bx

Cisco IOS 12.2BY

12.2by

Cisco IOS 12.2BZ

12.2bz

Cisco IOS 12.2CX

12.2cx

Cisco IOS 12.2CY

12.2cy

Cisco IOS 12.2CZ

12.2cz

Cisco IOS 12.2DA

12.2da

Cisco IOS 12.2DD

12.2dd

Cisco IOS 12.2DX

12.2dx

Cisco IOS 12.2EW

12.2ew

Cisco IOS 12.2EWA

12.2ewa

Cisco IOS 12.2EX

12.2ex

Cisco IOS 12.2EZ

12.2ez

Cisco IOS 12.2FZ

12.2fz

Cisco IOS 12.2IRA

12.2ira

Cisco IOS 12.2IRB

12.2irb

Cisco IOS 12.2IRC

12.2irc

Cisco IOS 12.2IXA

12.2ixa

Cisco IOS 12.2IXB

12.2ixb

Cisco IOS 12.2IXC

12.2ixc

Cisco IOS 12.2IXD

12.2ixd

Cisco IOS 12.2IXE

12.2ixe

Cisco IOS 12.2IXF

12.2ixf

Cisco IOS 12.2IXG

12.2ixg

Cisco IOS 12.2IXH

12.2ixh

Cisco IOS 12.2JA

12.2ja

Cisco IOS 12.2JK

12.2jk

Cisco IOS 12.2MB

12.2mb

Cisco IOS 12.2MC

12.2mc

Cisco IOS 12.2S

12.2s

Cisco IOS 12.2SB

12.2sb

Cisco IOS 12.2SBC

12.2sbc

Cisco IOS 12.2SCA

12.2sca

Cisco IOS 12.2SCB

12.2scb

Cisco IOS 12.2SE

12.2se

Cisco IOS 12.2 SEA

12.2sea

Cisco IOS 12.2SEB

12.2seb

Cisco IOS 12.2SEC

12.2sec

Cisco IOS 12.2SED

12.2sed

Cisco IOS 12.2SEE

12.2see

Cisco IOS 12.2SEF

12.2sef

Cisco IOS 12.2SEG

12.2seg

Cisco IOS 12.2SG

12.2sg

Cisco IOS 12.2SGA

12.2sga

Cisco IOS 12.2SM

12.2sm

Cisco IOS 12.2SO

12.2so

Cisco IOS 12.2SQ

12.2sq

Cisco IOS 12.2SRA

12.2sra

Cisco IOS 12.2SRB

12.2srb

Cisco IOS 12.2SRC

12.2src

Cisco IOS 12.2SRD

12.2srd

Cisco IOS 12.2STE

12.2ste

Cisco IOS 12.2SU

12.2su

Cisco IOS 12.2SV

12.2sv

Cisco IOS 12.2SVA

12.2sva

Cisco IOS 12.2SVD

12.2svd

Cisco IOS 12.2SVE

12.2sve

Cisco IOS 12.2SX

12.2sx

Cisco IOS 12.2SXA

12.2sxa

Cisco IOS 12.2SXB

12.2sxb

Cisco IOS 12.2SXD

12.2sxd

Cisco IOS 12.2SXE

12.2sxe

Cisco IOS 12.2SXF

12.2sxf

Cisco IOS 12.2SXH

12.2sxh

Cisco IOS 12.2SXI

12.2sxi

Cisco IOS 12.2SY

12.2sy

Cisco IOS 12.2SZ

12.2sz

Cisco IOS 12.2T

12.2t

Cisco IOS 12.2TPC

12.2tpc

Cisco IOS 12.2XA

12.2xa

Cisco IOS 12.2XB

12.2xb

Cisco IOS 12.2XC

12.2xc

Cisco IOS 12.2XD

12.2xd

Cisco IOS 12.2XF

12.2xf

Cisco IOS 12.2XG

12.2xg

Cisco IOS 12.2XH

12.2xh

Cisco IOS 12.2XI

12.2xi

Cisco IOS 12.2XJ

12.2xj

Cisco IOS 12.2XK

12.2xk

Cisco IOS 12.2XL

12.2xl

Cisco IOS 12.2XM

12.2xm

Cisco IOS 12.2XO

12.2xo

Cisco IOS 12.2XQ

12.2xq

Cisco IOS 12.2XR

12.2xr

Cisco IOS 12.2XS

12.2xs

Cisco IOS 12.2XT

12.2xt

Cisco IOS 12.2XU

12.2xu

Cisco IOS 12.2XV

12.2xv

Cisco IOS 12.2YA

12.2ya

Cisco IOS 12.2YB

12.2yb

Cisco IOS 12.2YC

12.2yc

Cisco IOS 12.2YD

12.2yd

Cisco IOS 12.2YE

12.2ye

Cisco IOS 12.2YG

12.2yg

Cisco IOS 12.2YJ

12.2yj

Cisco IOS 12.2YK

12.2yk

Cisco IOS 12.2YL

12.2yl

Cisco IOS 12.2YM

12.2ym

Cisco IOS 12.2YN

12.2yn

Cisco IOS 12.2YO

12.2yo

Cisco IOS 12.2YQ

12.2yq

Cisco IOS 12.2YR

12.2yr

Cisco IOS 12.2YT

12.2yt

Cisco IOS 12.2YU

12.2yu

Cisco IOS 12.2YV

12.2yv

Cisco IOS 12.2YW

12.2yw

Cisco IOS 12.2YX

12.2yx

Cisco IOS 12.2YY

12.2yy

Cisco IOS 12.2ZA

12.2za

Cisco IOS 12.2ZB

12.2zb

Cisco IOS 12.2ZC

12.2zc

Cisco IOS 12.2ZD

12.2zd

Cisco IOS 12.2ZF

12.2zf

Cisco IOS 12.2ZG

12.2zg

Cisco IOS 12.2ZH

12.2zh

Cisco IOS 12.2ZJ

12.2zj

Cisco IOS 12.2ZL

12.2zl

Cisco IOS 12.2ZP

12.2zp

Cisco IOS 12.2ZU

12.2zu

Cisco IOS 12.2ZX

12.2zx

Cisco IOS 12.2ZYA

12.2zya

Cisco IOS 12.3

12.3

Cisco IOS 12.3B

12.3b

Cisco IOS 12.3BC

12.3bc

Cisco IOS 12.3BW

12.3bw

Cisco IOS 12.3JA

12.3ja

Cisco IOS 12.3JEA

12.3jea

Cisco IOS 12.3JEB

12.3jeb

Cisco IOS 12.3JEC

12.3jec

Cisco IOS 12.3JK

12.3jk

Cisco IOS 12.3JL

12.3jl

Cisco IOS 12.3T

12.3t

Cisco IOS 12TPC

12.3tpc

Cisco IOS 12.3VA

12.3va

Cisco IOS 12.3XA

12.3xa

Cisco IOS 12.3XB

12.3xb

Cisco IOS 12.3XC

12.3xc

Cisco IOS 12.3XD

12.3xd

Cisco IOS 12.3XF

12.3xf

Cisco IOS 12.3XG

12.3xg

Cisco IOS 12.3XI

12.3xi

Cisco IOS 12.3XJ

12.3xj

Cisco IOS 12.3XK

12.3xk

Cisco IOS 12.3XL

12.3xl

Cisco IOS 12.3XQ

12.3xq

Cisco IOS 12.3XR

12.3xr

Cisco IOS 12.3XU

12.3xu

Cisco IOS 12.3XX

12.3xx

Cisco IOS 12.3XY

12.3xy

Cisco IOS 12.3XZ

12.3xz

Cisco IOS 12.3YD

12.3yd

Cisco IOS 12.3YF

12.3yf

Cisco IOS 12.3YG

12.3yg

Cisco IOS 12.3YI

12.3yi

Cisco IOS 12.3YJ

12.3yj

Cisco IOS 12.3YK

12.3yk

Cisco IOS 12.3YM

12.3ym

Cisco IOS 12.3YQ

12.3yq

Cisco IOS 12.3YS

12.3ys

Cisco IOS 12.3YT

12.3yt

Cisco IOS 12.3YU

12.3yu

Cisco IOS 12.3YX

12.3yx

Cisco IOS 12.3YZ

12.3yz

Cisco IOS 12.4

12.4

Cisco IOS 12.4JA

12.4ja

Cisco IOS 12.4JDA

12.4jda

Cisco IOS 12.4JDC

12.4jdc

Cisco IOS 12.4JDD

12.4jdd

Cisco IOS 12.4JK

12.4jk

Cisco IOS 12.4JL

12.4jl

Cisco IOS 12.4JMA

12.4jma

Cisco IOS 12.4JX

12.4jx

Cisco IOS 12.4 MD

12.4md

Cisco IOS 12.4 MDA

12.4mda

Cisco IOS 12.4SW

12.4sw

Cisco IOS 12.4T

12.4t

Cisco IOS 12.4XA

12.4xa

Cisco IOS 12.4XB

12.4xb

Cisco IOS 12.4XC

12.4xc

Cisco IOS 12.4XD

12.4xd

Cisco IOS 12.4XE

12.4xe

Cisco IOS 12.4XF

12.4xf

Cisco IOS 12.4XG

12.4xg

Cisco IOS 12.4XJ

12.4xj

Cisco IOS 12.4xk

12.4xk

Cisco IOS 12.4XL

12.4xl

Cisco IOS 12.4XM

12.4xm

Cisco IOS 12.4XN

12.4xn

Cisco IOS 12.4XP

12.4xp

Cisco IOS 12.4XQ

12.4xq

Cisco IOS 12.4XR

12.4xr

Cisco IOS 12.4XT

12.4xt

Cisco IOS 12.4XV

12.4xv

Cisco IOS 12.4XW

12.4xw

Cisco IOS 12.4XY

12.4xy

Cisco IOS 12.4XZ

12.4xz

Cisco IOS 12.4YA

12.4ya

Cisco IOS 12.4YB

12.4yb

Cisco IOS 12.4YD

12.4yd

Cisco IOS 12.4YE

12.4ye

References

58333

http://tools.cisco.com/security/center/viewAlert.x?alertId=18893

Vendor Advisory

http://www.cisco.com/en/US/products/products_applied_mitigation_bulletin09186a0080af8113.html

Vendor Advisory

20090923 Cisco IOS Software Tunnels Vulnerability

Vendor Advisory

http://www.cisco.com/web/about/security/intelligence/Cisco_ERP_sep09.html

Vendor Advisory

1022930

ADV-2009-2759

Stay updated

ExploitPedia is constantly evolving. Sign up to receive a notification when we release additional functionality.

Get in touch

If you'd like to report a bug or have any suggestions for improvements then please do get in touch with us using this form. We will get back to you as soon as we can.