Карточка уязвимости
Характеристики уязвимости
Уровень опасности
Оценка CVSS
(AV:N/AC:L/Au:N/C:N/I:N/A:P)
Производитель ПО
Наименование ПО
Cisco IOS
(IOS)
Описание
В реализации IPv6 протокола ICMP в различных системах существует уязвимость отказа в обслуживании. Воспользовавшись этой уязвимостью, злоумышленник может заставить систему сбросить существующие соединения TCP.
Как исправить
Используйте рекомендации производителя:
http://www.microsoft.com/technet/security/Bulletin/MS06-064.mspx
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20050412-icmp
http://www.microsoft.com/technet/security/Bulletin/MS06-064.mspx
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20050412-icmp
Ссылки
MISC (http://www.watersprings.org/pub/id/draft-gont-tcpm-icmp-attacks-03.txt): http://www.watersprings.org/pub/id/draft-gont-tcpm-icmp-attacks-03.txt
MISC (http://www.uniras.gov.uk/niscc/docs/al-20050412-00308.html?lang=en): http://www.uniras.gov.uk/niscc/docs/al-20050412-00308.html?lang=en
MISC (http://www.gont.com.ar/drafts/icmp-attacks-against-tcp.html): http://www.gont.com.ar/drafts/icmp-attacks-against-tcp.html
MS (MS05-019): http://www.microsoft.com/technet/security/bulletin/ms05-019.mspx
SUNALERT (57746): http://sunsolve.sun.com/search/document.do?assetkey=1-26-57746-1
OVAL (OVAL3458): http://oval.mitre.org/oval/definitions/data/oval3458.html
OVAL (OVAL1910): http://oval.mitre.org/oval/definitions/data/oval1910.html
OVAL (OVAL4804): http://oval.mitre.org/oval/definitions/data/oval4804.html
HP (HPSBUX01164): http://www.securityfocus.com/archive/1/archive/1/418882/100/0/threaded
SCO (SCOSA-2006.4): ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.4/SCOSA-2006.4.txt
HP (HPSBTU01210): http://marc.theaimsgroup.com/?l=bugtraq&m=112861397904255&w=2
SUNALERT (101658): http://sunsolve.sun.com/search/document.do?assetkey=1-26-101658-1
MS (MS06-064): http://www.microsoft.com/technet/security/Bulletin/MS06-064.mspx
BID (13124): http://www.securityfocus.com/bid/13124
FRSIRT (ADV-2006-3983): http://www.frsirt.com/english/advisories/2006/3983
HP (HPSBST02161): http://www.securityfocus.com/archive/1/archive/1/449179/100/0/threaded
OVAL (oval:org.mitre.oval:def:3458): http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:3458
OVAL (oval:org.mitre.oval:def:1910): http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1910
OVAL (oval:org.mitre.oval:def:4804): http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:4804
OVAL (oval:org.mitre.oval:def:1177): http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1177
OVAL (oval:org.mitre.oval:def:176): http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:176
OVAL (oval:org.mitre.oval:def:211): http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:211
OVAL (oval:org.mitre.oval:def:412): http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:412
OVAL (oval:org.mitre.oval:def:514): http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:514
OVAL (oval:org.mitre.oval:def:53): http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:53
OVAL (oval:org.mitre.oval:def:622): http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:622
MISC (http://www.uniras.gov.uk/niscc/docs/al-20050412-00308.html?lang=en): http://www.uniras.gov.uk/niscc/docs/al-20050412-00308.html?lang=en
MISC (http://www.gont.com.ar/drafts/icmp-attacks-against-tcp.html): http://www.gont.com.ar/drafts/icmp-attacks-against-tcp.html
MS (MS05-019): http://www.microsoft.com/technet/security/bulletin/ms05-019.mspx
SUNALERT (57746): http://sunsolve.sun.com/search/document.do?assetkey=1-26-57746-1
OVAL (OVAL3458): http://oval.mitre.org/oval/definitions/data/oval3458.html
OVAL (OVAL1910): http://oval.mitre.org/oval/definitions/data/oval1910.html
OVAL (OVAL4804): http://oval.mitre.org/oval/definitions/data/oval4804.html
HP (HPSBUX01164): http://www.securityfocus.com/archive/1/archive/1/418882/100/0/threaded
SCO (SCOSA-2006.4): ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.4/SCOSA-2006.4.txt
HP (HPSBTU01210): http://marc.theaimsgroup.com/?l=bugtraq&m=112861397904255&w=2
SUNALERT (101658): http://sunsolve.sun.com/search/document.do?assetkey=1-26-101658-1
MS (MS06-064): http://www.microsoft.com/technet/security/Bulletin/MS06-064.mspx
BID (13124): http://www.securityfocus.com/bid/13124
FRSIRT (ADV-2006-3983): http://www.frsirt.com/english/advisories/2006/3983
HP (HPSBST02161): http://www.securityfocus.com/archive/1/archive/1/449179/100/0/threaded
OVAL (oval:org.mitre.oval:def:3458): http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:3458
OVAL (oval:org.mitre.oval:def:1910): http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1910
OVAL (oval:org.mitre.oval:def:4804): http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:4804
OVAL (oval:org.mitre.oval:def:1177): http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1177
OVAL (oval:org.mitre.oval:def:176): http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:176
OVAL (oval:org.mitre.oval:def:211): http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:211
OVAL (oval:org.mitre.oval:def:412): http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:412
OVAL (oval:org.mitre.oval:def:514): http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:514
OVAL (oval:org.mitre.oval:def:53): http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:53
OVAL (oval:org.mitre.oval:def:622): http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:622
