First published: Wed Jun 23 2004(Updated: )
Cisco IOS 11.1(x) through 11.3(x) and 12.0(x) through 12.2(x), when configured for BGP routing, allows remote attackers to cause a denial of service (device reload) via malformed BGP (1) OPEN or (2) UPDATE messages.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Cisco IOS | >=11.1<=12.2\(14\)sx2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2004-0589 has a high severity rating due to its potential to cause a denial of service by remotely reloading affected Cisco IOS devices.
To fix CVE-2004-0589, upgrade to a Cisco IOS version that is not affected, specifically later than 12.2(14)SX2.
CVE-2004-0589 can be exploited via malformed BGP OPEN or UPDATE messages.
CVE-2004-0589 affects Cisco IOS versions 11.1(x) through 11.3(x) and 12.0(x) through 12.2(x).
CVE-2004-0589 primarily affects routers running Cisco IOS configured for BGP routing.