CVE-2008-3805: High severity cisco ios vulnerability

Published Sep 26, 2008

Updated

Cisco IOS 12.0 through 12.4 on Cisco 10000, uBR10012 and uBR7200 series devices handles external UDP packets that are sent to 127.0.0.0/8 addresses intended for IPC communication within the device, which allows remote attackers to cause a denial of service (device or linecard reload) via crafted UDP packets, a different vulnerability than CVE-2008-3806.

Affected Software

11 affected components

Cisco IOS=12.2b

Cisco IOS=12.2ca

Cisco IOS=12.2l

Cisco IOS=12.2rc

Cisco IOS=12.2s

Cisco IOS=12.2t

Cisco IOS=12.2zx

Cisco IOS=12.3bc

Cisco IOS=12.3t

Cisco IOS=12.3xi

Cisco IOS=12.4

Event History

Sep 26, 2008

CVE Published

via MITRE·04:00 PM

Data Sourced

via MITRE·04:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2008-3805?

CVE-2008-3805 has been classified as a high severity vulnerability due to its potential to cause denial of service.

How do I fix CVE-2008-3805?

To fix CVE-2008-3805, upgrade your Cisco IOS to a version that addresses this vulnerability.

What devices are affected by CVE-2008-3805?

CVE-2008-3805 affects Cisco IOS 12.0 through 12.4 on Cisco 10000, uBR10012, and uBR7200 series devices.

What type of attack does CVE-2008-3805 enable?

CVE-2008-3805 enables remote attackers to execute crafted UDP packets that can cause device or line card reload.

Is CVE-2008-3805 exploitable from the internet?

Yes, CVE-2008-3805 can be exploited by remote attackers over the network.