CVE-2007-4430: Input Validation

Published Aug 20, 2007

Updated

Unspecified vulnerability in Cisco IOS 12.0 through 12.4 allows context-dependent attackers to cause a denial of service (device restart and BGP routing table rebuild) via certain regular expressions in a "show ip bgp regexp" command. NOTE: unauthenticated remote attacks are possible in environments with anonymous telnet and Looking Glass access.

Affected Software

22 affected components

Cisco CLI

Cisco CBOS

Cisco CBOS=12.1

Cisco CBOS=12.2

Cisco Ids

Cisco IOS=10.0

Cisco IOS=10.3

Cisco IOS=11.0

Cisco IOS=11.1

Cisco IOS=11.2

Cisco IOS=12.0

Cisco IOS=12.1

Cisco IOS=12.2

Cisco IOS=12.3

Cisco IOS=12.4

Cisco IOS XR

Cisco IOS XR=2.0

Cisco IOS XR=3.0

Cisco IOS XR=3.1

Cisco IOS XR=3.2

Cisco IOS XR=3.3

Cisco IOS XR=3.4

Event History

Aug 20, 2007

CVE Published

07:17 PM

CVE Published

via MITRE·11:00 PM

Data Sourced

via MITRE·11:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2007-4430?

CVE-2007-4430 is classified as a high severity vulnerability due to its potential to cause a denial of service.

How do I fix CVE-2007-4430?

To fix CVE-2007-4430, upgrade your Cisco IOS to a version that resolves the issue, as recommended by Cisco.

What types of devices are affected by CVE-2007-4430?

CVE-2007-4430 affects various Cisco IOS versions, including those from 12.0 to 12.4.

Can CVE-2007-4430 be exploited remotely?

Yes, CVE-2007-4430 can be exploited remotely by unauthenticated attackers.

What impact does CVE-2007-4430 have on BGP?

CVE-2007-4430 can lead to device restarts and BGP routing table rebuilds, impacting network stability.