First published: Tue Oct 09 2001(Updated: )
Cisco IOS 12.2 and earlier running Cisco Discovery Protocol (CDP) allows remote attackers to cause a denial of service (memory consumption) via a flood of CDP neighbor announcements.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Cisco IOS | =12.0\(19\) | |
Cisco IOS | =12.1 | |
Cisco IOS | =11.2 | |
Cisco IOS | =11.3\(11\)b | |
Cisco IOS | =12.0\(5.1\)xp | |
Cisco IOS | =11.1 | |
Cisco CatOS | =4.5\(1\) |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2001-1071 is considered to have a high severity due to its potential to cause a denial of service.
To fix CVE-2001-1071, update your Cisco IOS to a version that is not vulnerable to this denial of service issue.
CVE-2001-1071 affects Cisco IOS versions 12.0(19), 12.1, 11.2, 11.3(11)b, 12.0(5.1)xp, and 11.1, as well as Cisco CatOS 4.5(1).
CVE-2001-1071 exploits a vulnerability in Cisco Discovery Protocol (CDP) that allows attackers to flood the system with neighbor announcements.
The potential impacts of CVE-2001-1071 include significant memory consumption and system instability, resulting in a denial of service.