xfocus logo xfocus title
首页 焦点原创 安全文摘 安全工具 安全漏洞 焦点项目 焦点论坛 关于我们
English Version

Cisco CBOS处理多个TCP连接时候会导致拒绝服务攻击


发布时间:2001-08-25
更新时间:2001-08-25
严重程度:
威胁程度:远程拒绝服务
错误类型:设计错误
利用方式:服务器模式

受影响系统
Cisco CBOS 2.4.2ap
Cisco CBOS 2.4.2
Cisco CBOS 2.4.1
Cisco CBOS 2.3
Cisco CBOS 2.0.1
Cisco CBOS 2.3.9
Cisco CBOS 2.3.8
Cisco CBOS 2.3.7
Cisco CBOS 2.3.5
Cisco CBOS 2.3.2
Cisco CBOS 2.2.1a
Cisco CBOS 2.2.1
Cisco CBOS 2.2.0
Cisco CBOS 2.1.0a
Cisco CBOS 2.1.0

-Cisco 600 系列路由器:
627, 633, 673, 675, 675E, 677, 677i and 678.
详细描述
CBOS是Cisco Broadband Operating System,其中的固件设计用在Cisco 600系列路由。CBOS当在端口21或者80口接收到多个TCP连接时候,会导致拒绝服务攻击并需要重新启动才能获得正常功能。

测试代码
见描述部分。

解决方案
升级固件系统:

Cisco CBOS 2.4.2ap:

Cisco upgrade CBOS 2.4.2b
http://www.cisco.com

Cisco upgrade CBOS 2.4.3
http://www.cisco.com

Cisco CBOS 2.4.2:

Cisco upgrade CBOS 2.4.2b
http://www.cisco.com

Cisco upgrade CBOS 2.4.3
http://www.cisco.com

Cisco CBOS 2.4.1:

Cisco upgrade CBOS 2.4.2b
http://www.cisco.com

Cisco upgrade CBOS 2.4.3
http://www.cisco.com

Cisco CBOS 2.3:

Cisco upgrade CBOS 2.4.2b
http://www.cisco.com

Cisco upgrade CBOS 2.4.3
http://www.cisco.com

Cisco CBOS 2.0.1:

Cisco upgrade CBOS 2.4.2b
http://www.cisco.com

Cisco upgrade CBOS 2.4.3
http://www.cisco.com

Cisco CBOS 2.3.9:

Cisco upgrade CBOS 2.4.2b
http://www.cisco.com

Cisco upgrade CBOS 2.4.3
http://www.cisco.com

Cisco CBOS 2.3.8:

Cisco upgrade CBOS 2.4.2b
http://www.cisco.com

Cisco upgrade CBOS 2.4.3
http://www.cisco.com

Cisco CBOS 2.3.7:

Cisco upgrade CBOS 2.4.2b
http://www.cisco.com

Cisco upgrade CBOS 2.4.3
http://www.cisco.com

Cisco CBOS 2.3.5:

Cisco upgrade CBOS 2.4.2b
http://www.cisco.com

Cisco upgrade CBOS 2.4.3
http://www.cisco.com

Cisco CBOS 2.3.2:

Cisco upgrade CBOS 2.4.2b
http://www.cisco.com

Cisco upgrade CBOS 2.4.3
http://www.cisco.com

Cisco CBOS 2.2.1a:

Cisco upgrade CBOS 2.4.2b
http://www.cisco.com

Cisco upgrade CBOS 2.4.3
http://www.cisco.com

Cisco CBOS 2.2.1:

Cisco upgrade CBOS 2.4.2b
http://www.cisco.com

Cisco upgrade CBOS 2.4.3
http://www.cisco.com

Cisco CBOS 2.2.0:

Cisco upgrade CBOS 2.4.2b
http://www.cisco.com

Cisco upgrade CBOS 2.4.3
http://www.cisco.com

Cisco CBOS 2.1.0a:

Cisco upgrade CBOS 2.4.2b
http://www.cisco.com

Cisco upgrade CBOS 2.4.3
http://www.cisco.com

Cisco CBOS 2.1.0:

Cisco upgrade CBOS 2.4.2b
http://www.cisco.com

Cisco upgrade CBOS 2.4.3
http://www.cisco.com

相关信息