First published: Mon Sep 28 2009(Updated: )
Unspecified vulnerability in Cisco IOS 12.2 and 12.4, when SSLVPN sessions, SSH sessions, or IKE encrypted nonces are enabled, allows remote attackers to cause a denial of service (device reload) via a crafted encrypted packet, aka Bug ID CSCsq24002.
Credit: ykramarz@cisco.com
Affected Software | Affected Version | How to fix |
---|---|---|
Cisco IOS | =12.2xnd | |
Cisco IOS | =12.4t | |
Cisco IOS | =12.4xq | |
Cisco IOS | =12.4xj | |
Cisco IOS | =12.4mr | |
Cisco IOS | =12.2xna | |
Cisco IOS | =12.4xf | |
Cisco IOS | =12.4xv | |
Cisco IOS | =12.4xw | |
Cisco IOS | =12.4xz | |
Cisco IOS | =12.4xk | |
Cisco IOS | =12.4sw | |
Cisco IOS | =12.2xnb | |
Cisco IOS | =12.4md | |
Cisco IOS | =12.2xnc | |
Cisco IOS | =12.4xy | |
Cisco IOS | =12.4xr |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2009-2871 has a high severity as it allows remote attackers to cause a denial of service through crafted encrypted packets.
To fix CVE-2009-2871, upgrade to a patched version of Cisco IOS that mitigates this vulnerability.
CVE-2009-2871 affects Cisco IOS versions 12.2xnd and 12.4t, including various specific releases under 12.4.
Yes, CVE-2009-2871 can potentially be exploited easily by remote attackers with the right crafted packets.
CVE-2009-2871 can cause a device reload, resulting in a temporary denial of service.