CVE-2007-5134: Medium severity Cisco Catalyst 6500 vulnerability

Published Sep 27, 2007

Updated

Cisco Catalyst 6500 and Cisco 7600 series devices use 127/8 IP addresses for Ethernet Out-of-Band Channel (EOBC) internal communication, which might allow remote attackers to send packets to an interface for which network exposure was unintended.

Affected Software

19 affected components

Cisco Catalyst 6500

Cisco Catalyst 6500 Ws-svc-nam-1=2.2\(1a\)

Cisco Catalyst 6500 Ws-svc-nam-1=3.1\(1a\)

Cisco Catalyst 6500 Ws-svc-nam-2=2.2\(1a\)

Cisco Catalyst 6500 Ws-svc-nam-2=3.1\(1a\)

Cisco Catalyst 6500 Ws-x6380-nam=2.1\(2\)

Cisco Catalyst 6500 Ws-x6380-nam=3.1\(1a\)

Cisco Catalyst 7600

Cisco Catalyst 7600 Ws-svc-nam-1=2.2\(1a\)

Cisco Catalyst 7600 Ws-svc-nam-1=3.1\(1a\)

Cisco Catalyst 7600 Ws-svc-nam-2=2.2\(1a\)

Cisco Catalyst 7600 Ws-svc-nam-2=3.1\(1a\)

Cisco Catalyst 7600 Ws-x6380-nam=2.1\(2\)

Cisco Catalyst 7600 Ws-x6380-nam=3.1\(1a\)

Cisco CatOS=5.4\(1\)

Cisco CatOS=7.5\(1\)

Cisco CatOS=7.6\(1\)

Remediation

Patch Available

http://www.cisco.com/warp/public/707/cisco-sr-20070926-lb.shtml

Event History

Sep 27, 2007

CVE Published

via MITRE·07:00 PM

Data Sourced

via MITRE·07:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2007-5134?

CVE-2007-5134 is rated as medium severity, which indicates potential for exploitation in certain environments.

How do I fix CVE-2007-5134?

Fix CVE-2007-5134 by updating to the latest recommended software version provided by Cisco.

What devices are affected by CVE-2007-5134?

CVE-2007-5134 affects Cisco Catalyst 6500 and 7600 series devices using specific versions of their system software.

Can CVE-2007-5134 be exploited remotely?

Yes, CVE-2007-5134 allows remote attackers to send packets to unintended interfaces due to the use of 127/8 IP addresses.

What kind of impact does CVE-2007-5134 have on network security?

CVE-2007-5134 potentially exposes network interfaces to unauthorized access, compromising network security.