CVE-2011-0949: High severity cisco ios xrv 9000 vulnerability

Published May 31, 2011

Updated

Cisco IOS XR 3.6.x, 3.8.x before 3.8.3, and 3.9.x before 3.9.1 does not properly remove sshdlock files from /tmp/, which allows remote attackers to cause a denial of service (disk consumption) by making many SSHv1 connections, aka Bug ID CSCtd64417.

Affected Software

8 affected components

Cisco IOS XR=3.6.0

Cisco IOS XR=3.6.1

Cisco IOS XR=3.6.2

Cisco IOS XR=3.6.3

Cisco IOS XR=3.8.0

Cisco IOS XR=3.8.1

Cisco IOS XR=3.8.2

Cisco IOS XR=3.9.0

Event History

May 31, 2011

CVE Published

via MITRE·08:00 PM

Data Sourced

via MITRE·08:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2011-0949?

CVE-2011-0949 has a medium severity rating due to the potential for denial of service through disk consumption.

How do I fix CVE-2011-0949?

Fix CVE-2011-0949 by upgrading Cisco IOS XR to version 3.8.3 or later, or 3.9.1 or later.

What systems are vulnerable to CVE-2011-0949?

CVE-2011-0949 affects Cisco IOS XR versions 3.6.x, 3.8.x prior to 3.8.3, and 3.9.x prior to 3.9.1.

What type of attack does CVE-2011-0949 enable?

CVE-2011-0949 allows remote attackers to conduct denial of service attacks by creating multiple SSHv1 connections.

Is authentication required to exploit CVE-2011-0949?

No, exploiting CVE-2011-0949 does not require authentication, allowing remote attackers to take advantage of the vulnerability.