vendor:
IOS
by:
SecurityFocus
7,5
CVSS
HIGH
Denial of Service
399
CWE
Product Name: IOS
Affected Version From: IOS 11.0(18)
Affected Version To: IOS 12.0(3)
Patch Exists: NO
Related CWE: N/A
CPE: cisco:ios
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: Linux
2002
Denial of Service in Cisco Routers via Spoofed ICMP Redirect Messages
It has been reported that it is possible to cause a denial of service in some Cisco routers by sending a large amount of spoofed ICMP redirect messages. To generate random ICMP redirect messages, a sender tool is available at http://www.phenoelit.de/irpas/icmp_redflod.c, which has to be linked with the IRPAS packet library. On high bandwidth networks, the command line switch -w0 can be used to increase the sending rate.
Mitigation:
Disable ICMP redirects on the router, or filter incoming ICMP redirects at the router.
