CVE-2009-0629: Medium severity Cisco IOS vulnerability

Published Mar 27, 2009

Updated

The (1) Airline Product Set (aka ALPS), (2) Serial Tunnel Code (aka STUN), (3) Block Serial Tunnel Code (aka BSTUN), (4) Native Client Interface Architecture (NCIA) support, (5) Data-link switching (aka DLSw), (6) Remote Source-Route Bridging (RSRB), (7) Point to Point Tunneling Protocol (PPTP), (8) X.25 for Record Boundary Preservation (RBP), (9) X.25 over TCP (XOT), and (10) X.25 Routing features in Cisco IOS 12.2 and 12.4 allows remote attackers to cause a denial of service (device reload) via a series of crafted TCP packets.

Affected Software

187 affected components

Cisco IOS=12.4\(2\)t2

Cisco IOS=12.4t

Cisco IOS=12.4\(2\)t4

Cisco IOS=12.2sga

Cisco IOS=12.2xr

Cisco IOS=12.4\(6\)t

Cisco IOS=12.2cz

Cisco IOS=12.2sxf

Cisco IOS=12.2fy

Cisco IOS=12.2xe

Cisco IOS=12.4\(5\)

Cisco IOS=12.2ja

Cisco IOS=12.2sx

Cisco IOS=12.4\(5b\)

Cisco IOS=12.4xj

Cisco IOS=12.2zp

Cisco IOS=12.4\(2\)mr

Cisco IOS=12.4\(3b\)

Cisco IOS=12.2ca

Cisco IOS=12.4xl

Cisco IOS=12.2bz

Cisco IOS=12.2ys

Cisco IOS=12.4xm

Cisco IOS=12.4\(4\)mr

Cisco IOS=12.4mr

Cisco IOS=12.2xj

Cisco IOS=12.2srb

Cisco IOS=12.2su

Cisco IOS=12.2xh

Cisco IOS=12.2xg

Cisco IOS=12.2ew

Cisco IOS=12.2b

Cisco IOS=12.2ixb

Cisco IOS=12.2svc

Cisco IOS=12.4xt

Cisco IOS=12.4\(4\)t

Cisco IOS XR=12.4

Cisco IOS=12.2yn

Cisco IOS=12.2sxa

Cisco IOS=12.2ey

Cisco IOS=12.2zx

Cisco IOS=12.2xb

Cisco IOS=12.2yf

Cisco IOS=12.2ixf

Cisco IOS=12.4\(3\)t2

Cisco IOS=12.2xl

Cisco IOS=12.2ym

Cisco IOS=12.2yw

Cisco IOS=12.2yd

Cisco IOS=12.4\(2\)t1

Cisco IOS=12.2yb

Cisco IOS=12.2mb

Cisco IOS=12.2dd

Cisco IOS=12.2zh

Cisco IOS=12.2da

Cisco IOS=12.2zu

Cisco IOS=12.2yv

Cisco IOS=12.2ixa

Cisco IOS=12.2sxb

Cisco IOS=12.2yo

Cisco IOS=12.2xw

Cisco IOS=12.2sca

Cisco IOS=12.4xf

Cisco IOS=12.2t

Cisco IOS=12.4\(1\)

Cisco IOS=12.2zc

Cisco IOS=12.2sv

Cisco IOS=12.4\(2\)mr1

Cisco IOS=12.4\(23\)

Cisco IOS=12.2yt

Cisco IOS=12.4jx

Cisco IOS=12.2zya

Cisco IOS=12.4\(2\)t3

Cisco IOS=12.4xg

Cisco IOS=12.2yl

Cisco IOS=12.2za

Cisco IOS=12.2xn

Cisco IOS=12.2ye

Cisco IOS=12.2ez

Cisco IOS=12.4jmb

Cisco IOS=12.4xv

Cisco IOS=12.4xw

Cisco IOS=12.2sr

Cisco IOS=12.4\(2\)xb

Cisco IOS=12.2zb

Cisco IOS=12.2yg

Cisco IOS=12.2sva

Cisco IOS=12.2ex

Cisco IOS=12.2svd

Cisco IOS=12.2xu

Cisco IOS=12.2sbc

Cisco IOS=12.2ixc

Cisco IOS=12.4\(1c\)

Cisco IOS=12.2yr

Cisco IOS=12.4\(1b\)

Cisco IOS=12.4\(3a\)

Cisco IOS=12.4\(4\)t2

Cisco IOS=12.4\(2\)xb2

Cisco IOS=12.4xd

Cisco IOS=12.4xp

Cisco IOS=12.4\(2\)t

Cisco IOS=12.4\(7\)

Cisco IOS=12.2sb

Cisco IOS=12.4jda

Cisco IOS=12.2xm

Cisco IOS=12.4\(3d\)

Cisco IOS=12.2sy

Cisco IOS=12.2xk

Cisco IOS=12.2ixg

Cisco IOS=12.2zj

Cisco IOS=12.4\(6\)t1

Cisco IOS=12.4xk

Cisco IOS=12.2zy

Cisco IOS=12.2jk

Cisco IOS=12.2zd

Cisco IOS=12.2cy

Cisco IOS=12.4jk

Cisco IOS=12.4

Cisco IOS=12.4\(8\)

Cisco IOS=12.2so

Cisco IOS=12.2tpc

Cisco IOS=12.2xc

Cisco IOS=12.4\(9\)t

Cisco IOS=12.2ewa

Cisco IOS=12.4jl

Cisco IOS=12.2bc

Cisco IOS=12.4sw

Cisco IOS=12.2yc

Cisco IOS=12.2ze

Cisco IOS=12.2xs

Cisco IOS=12.2yp

Cisco IOS=12.2bw

Cisco IOS=12.4xa

Cisco IOS=12.2yy

Cisco IOS=12.2fx

Cisco IOS=12.2sz

Cisco IOS=12.2xi

Cisco IOS=12.4\(7a\)

Cisco IOS=12.4xn

Cisco IOS=12.2yu

Cisco IOS=12.2l

Cisco IOS=12.4xe

Cisco IOS=12.2dx

Cisco IOS=12.2ixd

Cisco IOS=12.2xd

Cisco IOS=12.2bx

Cisco IOS=12.2cx

Cisco IOS=12.2zl

Cisco IOS=12.4md

Cisco IOS=12.2yq

Cisco IOS=12.4\(2\)xa

Cisco IOS=12.2xf

Cisco IOS=12.2xq

Cisco IOS=12.2rc

Cisco IOS=12.2zf

Cisco IOS=12.2sra

Cisco IOS=12.2irb

Cisco IOS=12.2sm

Cisco IOS=12.2ya

Cisco IOS=12.4xb

Cisco IOS=12.4ja

Cisco IOS=12.2xv

Cisco IOS=12.2

Cisco IOS=12.2zg

Cisco IOS=12.4\(3\)

Cisco IOS=12.4xy

Cisco IOS=12.4xc

Cisco IOS=12.2sw

Cisco IOS=12.2yk

Cisco IOS=12.2sxd

Cisco IOS=12.2src

Cisco IOS=12.2yz

Cisco IOS=12.2xa

Cisco IOS=12.2ixe

Cisco IOS=12.2yj

Cisco IOS=12.2sve

Cisco IOS=12.2mc

Cisco IOS=12.2yx

Cisco IOS=12.2xo

Cisco IOS=12.2sxe

Cisco IOS=12.2by

Cisco IOS=12.2yh

Cisco IOS=12.2s

Cisco IOS=12.2fz

Cisco IOS=12.2xt

Cisco IOS=12.4jma

Cisco IOS=12.4s

Event History

Mar 27, 2009

CVE Published

via MITRE·04:00 PM

Data Sourced

via MITRE·04:00 PM

Description

Data Sourced

via NVD·04:30 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of CVE-2009-0629?

CVE-2009-0629 has a severity rating of high due to its potential to allow unauthorized access to sensitive data.

How do I fix CVE-2009-0629?

To fix CVE-2009-0629, update your Cisco IOS to a version that has addressed the vulnerability.

What types of devices are affected by CVE-2009-0629?

CVE-2009-0629 affects various Cisco IOS devices running insecure versions such as 12.4(2)t2, 12.4t, and several others.

What are the recommended preventive measures against CVE-2009-0629?

Implementing access controls and regularly updating system firmware can help prevent exploitation of CVE-2009-0629.

Is there a workaround for CVE-2009-0629?

While applying security updates is the primary fix, disabling certain features may serve as a temporary workaround for CVE-2009-0629.