Cisco Catalyst内存缺陷引起拒绝服务漏洞

发布时间：2000-12-11
更新时间：2000-12-11
严重程度：中
威胁程度：远程拒绝服务
错误类型：设计错误
利用方式：服务器模式

受影响系统

Cisco Catalyst 4000 5.5(1)
Cisco Catalyst 4000 5.5
Cisco Catalyst 4000 5.4(3)
Cisco Catalyst 4000 5.4(2)
Cisco Catalyst 4000 5.4(1)
Cisco Catalyst 4000 5.4
Cisco Catalyst 4000 5.2(7)
Cisco Catalyst 4000 5.2(6)
Cisco Catalyst 4000 5.2(5)
Cisco Catalyst 4000 5.2(4)
Cisco Catalyst 4000 5.2(2)
Cisco Catalyst 4000 5.2(1a)
Cisco Catalyst 4000 5.2(1)
Cisco Catalyst 4000 5.2
Cisco Catalyst 4000 5.1(2a)
Cisco Catalyst 4000 5.1(1a)
Cisco Catalyst 4000 5.1(1)
Cisco Catalyst 4000 5.1
Cisco Catalyst 4000 4.5(9)
Cisco Catalyst 4000 4.5(8)
Cisco Catalyst 4000 4.5(7)
Cisco Catalyst 4000 4.5(6)
Cisco Catalyst 4000 4.5(5)
Cisco Catalyst 4000 4.5(4)
Cisco Catalyst 4000 4.5(3)
Cisco Catalyst 4000 4.5(2)
Cisco Catalyst 5000 5.5(4)
Cisco Catalyst 5000 5.5(3)
Cisco Catalyst 5000 5.5(2)
Cisco Catalyst 5000 5.5(1)
Cisco Catalyst 5000 5.4.1
Cisco Catalyst 5000 5.4(4)
Cisco Catalyst 5000 5.4(2)
Cisco Catalyst 5000 5.4(1)
Cisco Catalyst 5000 5.2(4)
Cisco Catalyst 5000 5.2(3)
Cisco Catalyst 5000 5.2(2)
Cisco Catalyst 5000 5.2(1)
Cisco Catalyst 5000 5.2
Cisco Catalyst 5000 5.1(2a)
Cisco Catalyst 5000 5.1(1)
Cisco Catalyst 5000 5.1
Cisco Catalyst 5000 4.5(9)
Cisco Catalyst 5000 4.5(8)
Cisco Catalyst 5000 4.5(7)
Cisco Catalyst 5000 4.5(6)
Cisco Catalyst 5000 4.5(5)
Cisco Catalyst 5000 4.5(4)
Cisco Catalyst 5000 4.5(3)
Cisco Catalyst 5000 4.5(2)
Cisco Catalyst 6000 5.5(4a)
Cisco Catalyst 6000 5.5(4)
Cisco Catalyst 6000 5.5(3)
Cisco Catalyst 6000 5.5(2)
Cisco Catalyst 6000 5.5(1)
Cisco Catalyst 6000 5.5
Cisco Catalyst 6000 5.4(4)
Cisco Catalyst 6000 5.4(3)
Cisco Catalyst 6000 5.4(2)
Cisco Catalyst 6000 5.4(1)
Cisco Catalyst 6000 5.4
Cisco Catalyst 6000 5.3(6)CSX
Cisco Catalyst 6000 5.3(5a)CSX
Cisco Catalyst 6000 5.3(5)CSX
Cisco Catalyst 6000 5.3(4)CSX
Cisco Catalyst 6000 5.3(3)CSX
Cisco Catalyst 6000 5.3(2)CSX
Cisco Catalyst 6000 5.3(1a)CSX
Cisco Catalyst 6000 5.3(1)CSX

其中下面系统不存在此漏洞：
Cisco Catalyst 4000 5.5(4b)
Cisco Catalyst 4000 4.5(10)
Cisco Catalyst 5000 5.5(4b)
Cisco Catalyst 5000 4.5(10)
Cisco Catalyst 6000 5.5(4b)

详细描述
Cisco Catalyst用于局部区域的高速网关，其中TELNET 服务是内建于固件中的，
但存在一个内存缺陷可以导致拒绝服务攻击，每次TELNET服务启动，内存资源
会被使用但没有进行释放操作，结果如果多次的连接可以导致拒绝服务攻击。

测试代码
见上所述

解决方案
下载新的程序：

Cisco Catalyst 4000 5.5(1):

Cisco upgrade Catalyst Release 5.5(4b)

Cisco Catalyst 4000 5.5:

Cisco upgrade Catalyst Release 5.5(4b)

Cisco Catalyst 4000 5.4(3):

Cisco upgrade Catalyst Release 5.5(4b)

Cisco Catalyst 4000 5.4(2):

Cisco upgrade Catalyst Release 5.5(4b)

Cisco Catalyst 4000 5.4(1):

Cisco upgrade Catalyst Release 5.5(4b)

Cisco Catalyst 4000 5.4:

Cisco upgrade Catalyst Release 5.5(4b)

Cisco Catalyst 4000 5.2(7):

Cisco upgrade Catalyst Release 5.5(4b)

Cisco Catalyst 4000 5.2(6):

Cisco upgrade Catalyst Release 5.5(4b)

Cisco Catalyst 4000 5.2(5):

Cisco upgrade Catalyst Release 5.5(4b)

Cisco Catalyst 4000 5.2(4):

Cisco upgrade Catalyst Release 5.5(4b)

Cisco Catalyst 4000 5.2(2):

Cisco upgrade Catalyst Release 5.5(4b)

Cisco Catalyst 4000 5.2(1a):

Cisco upgrade Catalyst Release 5.5(4b)

Cisco Catalyst 4000 5.2(1):

Cisco upgrade Catalyst Release 5.5(4b)

Cisco Catalyst 4000 5.2:

Cisco upgrade Catalyst Release 5.5(4b)

Cisco Catalyst 4000 5.1(2a):

Cisco upgrade Catalyst Release 5.5(4b)

Cisco Catalyst 4000 5.1(1a):

Cisco upgrade Catalyst Release 5.5(4b)

Cisco Catalyst 4000 5.1(1):

Cisco upgrade Catalyst Release 5.5(4b)

Cisco Catalyst 4000 5.1:

Cisco upgrade Catalyst Release 5.5(4b)

Cisco Catalyst 4000 4.5(9):

Cisco upgrade Catalyst Release 4.5(10)

Cisco Catalyst 4000 4.5(8):

Cisco upgrade Catalyst Release 4.5(10)

Cisco Catalyst 4000 4.5(7):

Cisco upgrade Catalyst Release 4.5(10)

Cisco Catalyst 4000 4.5(6):

Cisco upgrade Catalyst Release 4.5(10)

Cisco Catalyst 4000 4.5(5):

Cisco upgrade Catalyst Release 4.5(10)

Cisco Catalyst 4000 4.5(4):

Cisco upgrade Catalyst Release 4.5(10)

Cisco Catalyst 4000 4.5(3):

Cisco upgrade Catalyst Release 4.5(10)

Cisco Catalyst 4000 4.5(2):

Cisco upgrade Catalyst Release 4.5(10)

Cisco Catalyst 5000 5.5(4):

Cisco upgrade Catalyst Release 5.5(4b)

Cisco Catalyst 5000 5.5(3):

Cisco upgrade Catalyst Release 5.5(4b)

Cisco Catalyst 5000 5.5(2):

Cisco upgrade Catalyst Release 5.5(4b)

Cisco Catalyst 5000 5.5(1):

Cisco upgrade Catalyst Release 5.5(4b)

Cisco Catalyst 5000 5.4(4):

Cisco upgrade Catalyst Release 5.5(4b)

Cisco Catalyst 5000 5.4(2):

Cisco upgrade Catalyst Release 5.5(4b)

Cisco Catalyst 5000 5.4(1):

Cisco upgrade Catalyst Release 5.5(4b)

Cisco Catalyst 5000 5.2(4):

Cisco upgrade Catalyst Release 5.5(4b)

Cisco Catalyst 5000 5.2(3):

Cisco upgrade Catalyst Release 5.5(4b)

Cisco Catalyst 5000 5.2(2):

Cisco upgrade Catalyst Release 5.5(4b)

Cisco Catalyst 5000 5.2(1):

Cisco upgrade Catalyst Release 5.5(4b)

Cisco Catalyst 5000 5.2:

Cisco upgrade Catalyst Release 5.5(4b)

Cisco Catalyst 5000 5.1(2a):

Cisco upgrade Catalyst Release 5.5(4b)

Cisco Catalyst 5000 5.1(1):

Cisco upgrade Catalyst Release 5.5(4b)

Cisco Catalyst 5000 5.1:

Cisco upgrade Catalyst Release 5.5(4b)

Cisco Catalyst 5000 4.5(9):

Cisco upgrade Catalyst Release 4.5(10)

Cisco Catalyst 5000 4.5(8):

Cisco upgrade Catalyst Release 4.5(10)

Cisco Catalyst 5000 4.5(7):

Cisco upgrade Catalyst Release 4.5(10)

Cisco Catalyst 5000 4.5(6):

Cisco upgrade Catalyst Release 4.5(10)

Cisco Catalyst 5000 4.5(5):

Cisco upgrade Catalyst Release 4.5(10)

Cisco Catalyst 5000 4.5(4):

Cisco upgrade Catalyst Release 4.5(10)

Cisco Catalyst 5000 4.5(3):

Cisco upgrade Catalyst Release 4.5(10)

Cisco Catalyst 5000 4.5(2):

Cisco upgrade Catalyst Release 4.5(10)

Cisco Catalyst 6000 5.5(4a):

Cisco upgrade Catalyst Release 5.5(4b)

Cisco Catalyst 6000 5.5(4):

Cisco upgrade Catalyst Release 5.5(4b)

Cisco Catalyst 6000 5.5(3):

Cisco upgrade Catalyst Release 5.5(4b)

Cisco Catalyst 6000 5.5(2):

Cisco upgrade Catalyst Release 5.5(4b)

Cisco Catalyst 6000 5.5(1):

Cisco upgrade Catalyst Release 5.5(4b)

Cisco Catalyst 6000 5.5:

Cisco upgrade Catalyst Release 5.5(4b)

Cisco Catalyst 6000 5.4(4):

Cisco upgrade Catalyst Release 5.5(4b)

Cisco Catalyst 6000 5.4(3):

Cisco upgrade Catalyst Release 5.5(4b)

Cisco Catalyst 6000 5.4(2):

Cisco upgrade Catalyst Release 5.5(4b)

Cisco Catalyst 6000 5.4(1):

Cisco upgrade Catalyst Release 5.5(4b)

Cisco Catalyst 6000 5.4:

Cisco upgrade Catalyst Release 5.5(4b)

Cisco Catalyst 6000 5.3(6)CSX:

Cisco upgrade Catalyst Release 5.5(4b)

Cisco Catalyst 6000 5.3(5a)CSX:

Cisco upgrade Catalyst Release 5.5(4b)

Cisco Catalyst 6000 5.3(5)CSX:

Cisco upgrade Catalyst Release 5.5(4b)

Cisco Catalyst 6000 5.3(4)CSX:

Cisco upgrade Catalyst Release 5.5(4b)

Cisco Catalyst 6000 5.3(3)CSX:

Cisco upgrade Catalyst Release 5.5(4b)

Cisco Catalyst 6000 5.3(2)CSX:

Cisco upgrade Catalyst Release 5.5(4b)

Cisco Catalyst 6000 5.3(1a)CSX:

Cisco upgrade Catalyst Release 5.5(4b)

Cisco Catalyst 6000 5.3(1)CSX:

Cisco upgrade Catalyst Release 5.5(4b)

相关信息

最近严重漏洞

Cisco Catalyst内存缺陷引起拒绝服务漏洞