CERTA-2005-AVI-309
Vulnerability from certfr_avis
None
Description
Une vulnérabilité dans la mise en œuvre du protocole IPv6 des IOS Cisco permet à un utilisateur distant mal intentionné de provoquer un déni de service ou d'exécuter du code arbitraire par le biais d'un paquet IPv6 malicieusement construit.
Contournement provisoire
Désactiver le support de l'IPv6 sur l'équipement.
Solution
Se référer au bulletin de sécurité Cisco pour appliquer le correctif approprié (cf. Documentation).
La plupart des équipements Cisco qui disposent d'un IOS. Pour savoir si le système est affecté, se référer au bulletin de sécurité Cisco (cf. Documentation).
Impacted products
| Vendor | Product | Description |
|---|
References
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [],
"affected_systems_content": "\u003cp\u003eLa plupart des \u00e9quipements Cisco qui disposent d\u0027un IOS. Pour savoir si le syst\u00e8me est affect\u00e9, se r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 Cisco (cf. \u003cTT\u003eDocumentation\u003c/TT\u003e).\u003c/p\u003e",
"content": "## Description\n\nUne vuln\u00e9rabilit\u00e9 dans la mise en \u0153uvre du protocole IPv6 des IOS Cisco\npermet \u00e0 un utilisateur distant mal intentionn\u00e9 de provoquer un d\u00e9ni de\nservice ou d\u0027ex\u00e9cuter du code arbitraire par le biais d\u0027un paquet IPv6\nmalicieusement construit.\n\n## Contournement provisoire\n\nD\u00e9sactiver le support de l\u0027IPv6 sur l\u0027\u00e9quipement.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 Cisco pour appliquer le correctif\nappropri\u00e9 (cf. Documentation).\n",
"cves": [],
"initial_release_date": "2005-08-11T00:00:00",
"last_revision_date": "2005-08-11T00:00:00",
"links": [],
"reference": "CERTA-2005-AVI-309",
"revisions": [
{
"description": "version initiale.",
"revision_date": "2005-08-11T00:00:00.000000"
}
],
"risks": [
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "D\u00e9ni de service"
}
],
"summary": null,
"title": "Vuln\u00e9rabilit\u00e9 de la pile IPv6 des \u00e9quipements Cisco",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Cisco 65783 du 29 juillet 2005",
"url": "http://www.cisco.com/warp/public/707/cisco-sa-20050729-ipv6.shtml"
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…
Loading…