CVE-2007-0918: High severity Cisco IOS vulnerability

Published Feb 14, 2007

Updated

The ATOMIC.TCP signature engine in the Intrusion Prevention System (IPS) feature for Cisco IOS 12.4XA, 12.3YA, 12.3T, and other trains allows remote attackers to cause a denial of service (IPS crash and traffic loss) via unspecified manipulations that are not properly handled by the regular expression feature, as demonstrated using the 3123.0 (Netbus Pro Traffic) signature.

Affected Software

25 affected components

Cisco IOS=12.3ym

Cisco IOS=12.3yq

Cisco IOS=12.3xr

Cisco IOS=12.4t

Cisco IOS=12.3ya

Cisco IOS=12.3xs

Cisco IOS=12.3xw

Cisco IOS=12.4mr

Cisco IOS=12.3yj

Cisco IOS=12.3t

Cisco IOS=12.3yd

Cisco IOS=12.3yk

Cisco IOS=12.3yt

Cisco IOS=12.3yz

Cisco IOS=12.3yg

Cisco IOS=12.3xy

Cisco IOS=12.4

Cisco IOS=12.4xa

Cisco IOS=12.3yx

Cisco IOS=12.3xq

Cisco IOS=12.3ys

Cisco IOS=12.3yh

Cisco IOS=12.4xb

Cisco IOS=12.3xx

Cisco IOS=12.3yi

Event History

Feb 14, 2007

CVE Published

02:28 AM

CVE Published

via MITRE·07:00 AM

Data Sourced

via MITRE·07:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2007-0918?

CVE-2007-0918 has a high severity level as it can lead to a denial of service, potentially causing traffic loss and system crashes.

What versions of Cisco IOS are affected by CVE-2007-0918?

CVE-2007-0918 affects multiple versions of Cisco IOS including 12.4XA, 12.3YA, 12.3T, and others.

How do I fix CVE-2007-0918?

To resolve CVE-2007-0918, it is recommended to upgrade to a patched version of Cisco IOS as specified in Cisco's security advisories.

What potential impact does CVE-2007-0918 have?

CVE-2007-0918 can cause a denial of service, which results in the Intrusion Prevention System crashing and loss of traffic.

Is there a workaround for CVE-2007-0918?

Currently, there are no known effective workarounds for CVE-2007-0918; updating the software to a secure version is the best approach.