CISCO本地接口ARP存在拒绝服务攻击发布时间：2001-11-20 更新时间：2001-11-20 严重程度：中 威胁程度：远程拒绝服务 错误类型：设计错误 利用方式：服务器模式 受影响系统 Cisco IOS 11.1详细描述 IOS是CISCO系统的网络连接操作系统。 其中在操作系统中发现一个漏洞可以导致在系统本地用户使路由器拒绝服务所有网络用户。问题存在与处于特殊ARP请求，当一个路由器收到一个指向它自身某个接口IP地址的ARP包，而IP对应的Mac地址为另一个与自身缓存里不同的Mac地址时，路由器中的相关ARP表中的表项将被收到的内容重写。 下面是受此漏洞影响的CISCO系统： AGS/MGS/CGS/AGS+, IGS, RSM, 800, ubr900, 1000, 1400, 1500, 1600, 1700, 2500, 2600, 3000, 3600, 3800, 4000, 4500, 4700, AS5200, AS5300, AS5800, 6400, 7000, 7200, ubr7200, 7500, 和 12000 系列。 测试代码 尚无 解决方案 临时方法： 绑定接口的IP地址和Mac地址 在运行IOS系统软件的设备上使用下面的命令： arp <ip-address> <hardware-address> <type> 在运行CatOS系统软件的设备上使用下面的命令： set arp [dynamic|permanent|static] <ip_address> <hardware_address> 升级系统： Cisco IOS 11.1: Cisco IOS 11.2P: Cisco IOS 11.2: Cisco IOS 11.3T: Cisco IOS 11.3: Cisco IOS 12.0XV: Cisco Upgrade IOS 12.2 http://www.cisco.com Cisco IOS 12.0XU: Cisco IOS 12.0XS: Cisco APAR IOS 12.1(11)E Cisco IOS 12.0XR: Cisco Upgrade IOS 12.1(11) http://www.cisco.com Cisco IOS 12.0XQ: Cisco Upgrade IOS 12.1(11) http://www.cisco.com Cisco IOS 12.0XP: Cisco IOS 12.0XN: Cisco Upgrade IOS 12.1(11) http://www.cisco.com Cisco IOS 12.0XM: Cisco Upgrade IOS 12.1(11) http://www.cisco.com Cisco IOS 12.0XL: Cisco Upgrade IOS 12.1(11) http://www.cisco.com Cisco IOS 12.0XK: Cisco Upgrade IOS 12.1(11) http://www.cisco.com Cisco IOS 12.0XJ: Cisco Upgrade IOS 12.1(11) http://www.cisco.com Cisco IOS 12.0XI: Cisco Upgrade IOS 12.1(11) http://www.cisco.com Cisco IOS 12.0XH: Cisco Upgrade IOS 12.1(11) http://www.cisco.com Cisco IOS 12.0XG: Cisco Upgrade IOS 12.1(11) http://www.cisco.com Cisco IOS 12.0XF: Cisco Upgrade IOS 12.1(11) http://www.cisco.com Cisco IOS 12.0XE: Cisco APAR IOS 12.1(11)E Cisco IOS 12.0XD: Cisco Upgrade IOS 12.1(11) http://www.cisco.com Cisco IOS 12.0XC: Cisco Upgrade IOS 12.1(11) http://www.cisco.com Cisco IOS 12.0XB: Cisco Upgrade IOS 12.1(11) http://www.cisco.com Cisco IOS 12.0XA: Cisco Upgrade IOS 12.1(11) http://www.cisco.com Cisco IOS 12.0WT: Cisco IOS 12.0WC: Cisco Upgrade IOS 12.0(5)WC3 http://www.cisco.com Cisco IOS 12.0W5: Cisco Upgrade IOS 12.0(20)W5(24) http://www.cisco.com Cisco APAR IOS 12.0(16)W5(21b) http://www.cisco.com Cisco IOS 12.0ST: Cisco Upgrade IOS 12.0(20)ST http://www.cisco.com Cisco IOS 12.0SL: Cisco IOS 12.0SC: Cisco Upgrade IOS 12.1EC http://www.cisco.com Cisco IOS 12.0S: Cisco Upgrade IOS 12.0(21)S http://www.cisco.com Cisco IOS 12.0DC: Cisco IOS 12.0DB: Cisco IOS 12.0DA: Cisco Upgrade IOS 12.2DA http://www.cisco.com Cisco IOS 12.0: Cisco Upgrade IOS 12.0(20) http://www.cisco.com Cisco IOS 12.1YH: Cisco IOS 12.1YF: Cisco Upgrade IOS 12.1(5)YF3 http://www.cisco.com Cisco IOS 12.1YE: Cisco Upgrade IOS 12.1(5)YE4 http://www.cisco.com Cisco IOS 12.1YD: Cisco Upgrade IOS 12.2(7)T http://www.cisco.com Cisco IOS 12.1YC: Cisco Upgrade IOS 12.1(5)YC2 http://www.cisco.com Cisco IOS 12.1YB: Cisco Upgrade IOS 12.1(5)YB5 http://www.cisco.com Cisco IOS 12.1YA: Cisco IOS 12.1XX: Cisco Upgrade IOS 12.1(11) http://www.cisco.com Cisco IOS 12.1XW: Cisco Upgrade IOS 12.1(11) http://www.cisco.com Cisco IOS 12.1XV: Cisco IOS 12.1XU: Cisco IOS 12.1XT: Cisco Upgrade IOS 12.2(7)T http://www.cisco.com Cisco IOS 12.1XS: Cisco Upgrade IOS 12.2(2)XC1 http://www.cisco.com Cisco IOS 12.1XR: Cisco Upgrade IOS 12.2(7)T http://www.cisco.com Cisco IOS 12.1XQ: Cisco IOS 12.1XP: Cisco IOS 12.1XM: Cisco Upgrade IOS 12.1(5)XM6 http://www.cisco.com Cisco IOS 12.1XL: Cisco Upgrade IOS 12.2 http://www.cisco.com Cisco IOS 12.1XK: Cisco Upgrade IOS 12.2 http://www.cisco.com Cisco IOS 12.1XJ: Cisco Upgrade IOS 12.2 http://www.cisco.com Cisco IOS 12.1XI: Cisco Upgrade IOS 12.2 http://www.cisco.com Cisco IOS 12.1XH: Cisco Upgrade IOS 12.2 http://www.cisco.com Cisco IOS 12.1XG: Cisco Upgrade IOS 12.2 http://www.cisco.com Cisco IOS 12.1XF: Cisco Upgrade IOS 12.2 http://www.cisco.com Cisco IOS 12.1XE: Cisco Upgrade IOS 12.2 http://www.cisco.com Cisco IOS 12.1XD: Cisco Upgrade IOS 12.2 http://www.cisco.com Cisco IOS 12.1XC: Cisco Upgrade IOS 12.2 http://www.cisco.com Cisco IOS 12.1XB: Cisco Upgrade IOS 12.2 http://www.cisco.com Cisco IOS 12.1XA: Cisco Upgrade IOS 12.2 http://www.cisco.com Cisco IOS 12.1T: Cisco Upgrade IOS 12.2 http://www.cisco.com Cisco IOS 12.1EZ: Cisco Upgrade IOS 12.1(6)EZ4 http://www.cisco.com Cisco IOS 12.1EY: Cisco IOS 12.1EX: Cisco APAR IOS 12.1(11)E Cisco IOS 12.1EC: Cisco Upgrade IOS 12.1(9)EC http://www.cisco.com Cisco IOS 12.1EA: Cisco Upgrade IOS 12.1(6)EA2 http://www.cisco.com Cisco Upgrade IOS 12.1(6)EA1a http://www.cisco.com Cisco IOS 12.1E: Cisco APAR IOS 12.1(11)E Cisco IOS 12.1DC: Cisco Upgrade IOS 12.2(2)B http://www.cisco.com Cisco IOS 12.1DB: Cisco Upgrade IOS 12.1T http://www.cisco.com Cisco Upgrade IOS 12.2(2)B http://www.cisco.com Cisco IOS 12.1DA: Cisco Upgrade IOS 12.2DA http://www.cisco.com Cisco Upgrade IOS 12.2.T http://www.cisco.com Cisco IOS 12.1AA: Cisco IOS 12.1: Cisco Upgrade IOS 12.1(11) http://www.cisco.com Cisco IOS 12.2XQ: Cisco Upgrade IOS 12.2(2)XQ2 http://www.cisco.com Cisco IOS 12.2XK: Cisco Upgrade IOS 12.2(2)XK5 http://www.cisco.com Cisco IOS 12.2XJ: Cisco Upgrade IOS 12.2(2)XJ2 http://www.cisco.com Cisco IOS 12.2XI: Cisco Upgrade IOS 12.2(2)XI1 http://www.cisco.com Cisco IOS 12.2XH: Cisco Upgrade IOS 12.2(2)XH2 http://www.cisco.com Cisco IOS 12.2XG: Cisco Upgrade IOS 12.2(2)XG1 http://www.cisco.com Cisco IOS 12.2XE: Cisco IOS 12.2XD: Cisco IOS 12.2XC: Cisco Upgrade IOS 12.2(2)XC1 http://www.cisco.com Cisco IOS 12.2XB: Cisco Upgrade IOS 12.2(2)XB2 http://www.cisco.com Cisco IOS 12.2XA: Cisco Upgrade IOS 12.2(2)XA4 http://www.cisco.com Cisco IOS 12.2T: Cisco Upgrade IOS 12.2(7)T http://www.cisco.com Cisco IOS 12.2DD: Cisco Upgrade IOS 12.2(2)DD1 http://www.cisco.com Cisco IOS 12.2: Cisco Upgrade IOS 12.2(5) http://www.cisco.com 相关信息 |
