Búsqueda de    
Vulnerabilidad   
    Buscar 324607 Descripciones CVE y
146377 Descripciones de Pruebas,
accesos 10,000+ referencias cruzadas.
Pruebas   CVE   Todos  

ID de Prueba:1.3.6.1.4.1.25623.1.0.105715
Categoría:CISCO
Título:Cisco NX-OS Software Label Distribution Protocol Message Vulnerability (Cisco-SA-20140123-CVE-2014-0677)
Resumen:A vulnerability in the Label Distribution Protocol (LDP); message processing of Cisco NX-OS Software could allow an unauthenticated, remote attacker to; cause an affected device to stop accepting valid LDP sessions during a 60-second period.
Descripción:Summary:
A vulnerability in the Label Distribution Protocol (LDP)
message processing of Cisco NX-OS Software could allow an unauthenticated, remote attacker to
cause an affected device to stop accepting valid LDP sessions during a 60-second period.

Vulnerability Insight:
The vulnerability is due to how certain malformed LDP Hello
messages are parsed. An attacker could exploit this vulnerability by sending malformed LDP Hello
messages to an affected device.

Vulnerability Impact:
An exploit could allow the attacker to cause an affected device
to stop accepting valid LDP sessions during a 60-second period.

Solution:
See the referenced vendor advisory for a solution.

CVSS Score:
5.0

CVSS Vector:
AV:N/AC:L/Au:N/C:N/I:N/A:P

Referencia Cruzada: Common Vulnerability Exposure (CVE) ID: CVE-2014-0677
BugTraq ID: 65074
http://www.securityfocus.com/bid/65074
Cisco Security Advisory: 20140122 Cisco NX-OS Software Label Distribution Protocol Message Vulnerability
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0677
http://osvdb.org/102368
http://www.securitytracker.com/id/1029691
http://secunia.com/advisories/56611
XForce ISS Database: cisco-nxos-cve20140677-dos(90623)
https://exchange.xforce.ibmcloud.com/vulnerabilities/90623
CopyrightCopyright (C) 2016 Greenbone Networks GmbH

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa.

Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.




© 1998-2025 E-Soft Inc. Todos los derechos reservados.