|
| TC: | 11029 | |
| Description: | EIGRP is an extension protocol of IGRP, a routing protocol used to propagate routing information in internal network environments. The EIGRP implementation in all versions of IOS is vulnerable to a denial of service if it receives a flood of neighbor announcements. The issue affects Cisco devices running Cisco Internetwork Operating System Software (IOS) versions 11.3, 12.0(19), 12.1, and 12.2. | |
| TC Impact: | Gather Info | |
| Service: | snmp |
| Vulnerability Publication: | December 18, 2002 | |
| Advisory Copyright: | FX from Phenoelit | |
| Summary: | A remote attacker can deny access to the network service for your legitimate users. | |
| Risk: | High | |
| CVSS 2.0 metrics: | Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: None Integrity Impact: None Availability Impact: Complete | |
| CVSS 2.0 Base Score: | 7.8 |
| Vulnerability Impact: |
Denial of Service |
|---|
| Host Impact: | Denial of service. | |
| Nature of Remediation: | Change the configuration. |
| Step required to fix the reported vulnerability: | |
***** Solution type: Upgrade Software ***** Check with vendor for an upgraded version addressing the issue. See references for more details. |
|
***** Solution type: Deploy Work Arounds ***** Apply MD5 authentication that will permit the receipt of EIGRP packets only from authorized hosts. See references for more details. |
| CVE Link: |
CVE-2002-2208 |
 |
|---|
| Glossary: |
CISCO Denial of Service |
|---|