Cisco warns of new router flaw
Carly Suppa
@itworldca
Published: July 17th, 2003
Network gear maker Cisco Systems Inc. issued a bulletin on Wednesday detailing a vulnerability found in its routers and switches that run its operating system software, which could cause the network devices to crash.
According to Cisco, routers and switches configured to process Internet Protocol version 4 (IPv4) packets, in addition to running its IOS 11.x and 12.x software, are at risk of denial of service (DoS) attacks.
Cisco explained that attackers can virtually trick routers to think input queues -storage areas for incoming data – are full. Network administrators would be faced with a crashed router and would inevitably have to reboot the system to clear the queues.
According to a statement issued by Internet Systems Security (ISS), an Atlanta-based security software and services firm, the vulnerable platforms represent the vast majority of currently deployed Cisco devices. ISS also noted that attacks may be launched at specific targets or indiscriminately, causing widespread outages, and added that an attack is unlikely to be blocked by legacy firewall devices.
Cisco has issued a workaround to combat the problem. Registered users can find information using the Bug Toolkit at www.cisco.com/cgi-bin/Support/Bugtool/launch_bugtool.pl. Non-registered users can find details at www.cisco.com/warp/public/707/cisco-sa-20030717-blocked.shtml.
The company recommended that all IOS devices, which process IPv4 packets be configured to block traffic directed to the router from any unauthorized source using Access Control Lists (ACLs).
So far, there have been no reported attacks related to the vulnerability. San Jose-based Cisco is online at www.cisco.com.
Sponsor: EDC
Create a Unique Selling Proposition for Your Global Market
Emerging Tech Internet, reboot, security
Sun portal server to support new Java spec
SAP: Oracle-PeopleSoft tangle causing price pressure
Can low code platforms solve legacy gridlock?
Full speed ahead a winning strategy for digital transformation
Small businesses need to take bigger security measures
OpenText acquires Carbonite for $1.42 billion