Denial of Service in Cisco IOS - 22 Jun 2004

Reported June 16, 2004, by Cisco

VERSIONS AFFECTED

DESCRIPTION
A Cisco Systems' device running Internetwork Operating System (IOS) and enabledfor the Border Gateway Protocol (BGP) is vulnerable to a Denial of Service (DoS)attack from a malformed BGP packet. By sending a malformed BGP packet to thedevice, a potential attacker could cause the device to reload.

VENDOR RESPONSE
Cisco Systems has releasedSecurity Advisory 50321, "Cisco IOS Malformed BGP Packet CausesReload" to address this vulnerability and recommends that affected usersimmediately apply the appropriate patch listed in the bulletin.

CREDIT
Discovered by Cisco Systems.