CVE-2005-2451: Low severity Cisco IOS vulnerability

Published Aug 3, 2005

Updated

Cisco IOS 12.0 through 12.4 and IOS XR before 3.2, with IPv6 enabled, allows remote attackers on a local network segment to cause a denial of service (device reload) and possibly execute arbitrary code via a crafted IPv6 packet.

Affected Software

148 affected components

Cisco IOS=12.3yq

Cisco IOS=12.3xr

Cisco IOS=12.4t

Cisco IOS=12.3bc

Cisco IOS=12.0st

Cisco IOS=12.2xr

Cisco IOS=12.3ya

Cisco IOS=12.1yd

Cisco IOS=12.2zn

Cisco IOS=12.2xe

Cisco IOS=12.3xs

Cisco IOS=12.2ja

Cisco IOS=12.2sx

Cisco IOS=12.3xg

Cisco IOS=12.2zp

Cisco IOS=12.3bw

Cisco IOS=12.3xd

Cisco IOS=12.3xm

Cisco IOS=12.2bz

Cisco IOS=12.3xw

Cisco IOS=12.4mr

Cisco IOS=12.2xz

Cisco IOS=12.2xj

Cisco IOS=12.2su

Cisco IOS=12.2xh

Cisco IOS=12.2xg

Cisco IOS=12.2ew

Cisco IOS=12.2b

Cisco IOS=12.3xi

Cisco IOS=12.2yn

Cisco IOS=12.2sxa

Cisco IOS=12.3yj

Cisco IOS=12.2xb

Cisco IOS=12.2yf

Cisco IOS=12.2xl

Cisco IOS=12.2ym

Cisco IOS=12.3xt

Cisco IOS=12.2yw

Cisco IOS=12.3yu

Cisco IOS=12.2yd

Cisco IOS=12.3xj

Cisco IOS=12.3t

Cisco IOS=12.2yb

Cisco IOS=12.3

Cisco IOS=12.2mb

Cisco IOS=12.2dd

Cisco IOS=12.2zh

Cisco IOS=12.1yf

Cisco IOS=12.2mx

Cisco IOS=12.2yv

Cisco IOS=12.2sxb

Cisco IOS=12.2yo

Cisco IOS=12.2xw

Cisco IOS=12.2t

Cisco IOS=12.2zc

Cisco IOS=12.2sv

Cisco IOS=12.2seb

Cisco IOS=12.2yt

Cisco IOS=12.2yl

Cisco IOS=12.2za

Cisco IOS=12.2xn

Cisco IOS=12.2ye

Cisco IOS=12.1yb

Cisco IOS=12.2ez

Cisco IOS=12.3yd

Cisco IOS=12.2zb

Cisco IOS=12.2yg

Cisco IOS=12.2xu

Cisco IOS=12.1yi

Cisco IOS=12.3xf

Cisco IOS=12.3xl

Cisco IOS=12.2yr

Cisco IOS=12.0sl

Cisco IOS=12.1yh

Cisco IOS=12.3yk

Cisco IOS=12.3yf

Cisco IOS=12.2sec

Cisco IOS=12.2zo

Cisco IOS=12.2xm

Cisco IOS=12.3yt

Cisco IOS=12.2sy

Cisco IOS=12.2xk

Cisco IOS=12.3xb

Cisco IOS=12.2zj

Cisco IOS=12.1xu

Cisco IOS=12.0sy

Cisco IOS=12.2jk

Cisco IOS=12.3yg

Cisco IOS=12.3xu

Cisco IOS=12.2zd

Cisco IOS=12.3xy

Cisco IOS=12.2cy

Cisco IOS=12.3xc

Cisco IOS=12.4

Cisco IOS=12.2so

Cisco IOS=12.2xc

Cisco IOS=12.2ewa

Cisco IOS=12.2bc

Cisco IOS=12.3xe

Cisco IOS=12.2yc

Cisco IOS=12.2ze

Cisco IOS=12.3ja

Cisco IOS=12.2yp

Cisco IOS=12.2bw

Cisco IOS=12.2yy

Cisco IOS=12.2sz

Cisco IOS=12.2xi

Cisco IOS=12.2yu

Cisco IOS=12.2dx

Cisco IOS=12.2xd

Cisco IOS=12.2bx

Cisco IOS=12.3xq

Cisco IOS=12.2cx

Cisco IOS=12.2zl

Cisco IOS=12.2yq

Cisco IOS=12.3xh

Cisco IOS=12.0s

Cisco IOS=12.2xf

Cisco IOS=12.2xq

Cisco IOS=12.3ys

Cisco IOS=12.2zf

Cisco IOS=12.3b

Cisco IOS=12.2eu

Cisco IOS=12.3yh

Cisco IOS=12.2ya

Cisco IOS=12.2zg

Cisco IOS=12.3xx

Cisco IOS=12.1yc

Cisco IOS=12.2sw

Cisco IOS=12.3xa

Cisco IOS=12.3yi

Cisco IOS=12.2yk

Cisco IOS=12.2sxd

Cisco IOS=12.2yz

Cisco IOS=12.2xa

Cisco IOS=12.1ye

Cisco IOS=12.3xk

Cisco IOS=12.1xv

Cisco IOS=12.2yj

Cisco IOS=12.2mc

Cisco IOS=12.2yx

Cisco IOS=12.2sxe

Cisco IOS=12.2by

Cisco IOS=12.2yh

Cisco IOS=12.2s

Cisco IOS=12.2xt

Cisco IOS XR=3.1.0

Cisco IOS XR=3.0.1

Remediation

Patch Available

http://www.cisco.com/warp/public/707/cisco-sa-20050729-ipv6.shtml

Event History

Aug 3, 2005

CVE Published

04:00 AM

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2005-2451?

CVE-2005-2451 is classified as a high severity vulnerability due to its potential for causing denial of service and executing arbitrary code.

How do I fix CVE-2005-2451?

To fix CVE-2005-2451, update your Cisco IOS software to a version that is not affected, specifically versions beyond those listed as vulnerable.

What devices are affected by CVE-2005-2451?

CVE-2005-2451 impacts devices running Cisco IOS versions 12.0 through 12.4 and IOS XR versions prior to 3.2 with IPv6 enabled.

What kind of attack is associated with CVE-2005-2451?

CVE-2005-2451 allows remote attackers to send crafted IPv6 packets that can lead to device reloads and potential code execution.

Is CVE-2005-2451 remote exploit possible?

Yes, CVE-2005-2451 can be exploited remotely by attackers on the same local network segment.