Nortel VPN Router Lets Remote Users Deny Service
|
|
SecurityTracker Alert ID: 1014068 |
|
SecurityTracker URL: http://securitytracker.com/id/1014068
|
|
CVE Reference:
CAN-2005-1802
(Links to External Site)
|
Updated: Aug 18 2005
|
Original Entry Date: May 27 2005
|
Impact:
Denial of service via network
|
Fix Available: Yes Vendor Confirmed: Yes
|
Version(s): prior to 5.05.200; Models 1010, 1050, 1100, 600, 1600, 1700, 1740, 2600, 2700, 4500, 4600, and 5000
|
Description:
A vulnerability was reported in the Nortel VPN Router. A remote user can cause denial of service conditions.
A remote user can send a single IKE packet with a specially crafted ISAKMP header to the target device to cause the device to crash. In some cases, the router will reboot. In other cases, a manual restart is required to return the system to normal operations.
The vendor credits Roy Hills, Technical Director of NTA-Monitor, with reporting this vulnerability.
The original advisory is available at:
http://www.nta-monitor.com/news/vpn-flaws/nortel/vpn-router-dos/
The vendor was notified on March 3, 2005.
[Editor's note: The VPN Router was formerly know as the Contivity router.]
|
Impact:
A remote user can cause the device to crash. A manual restart may be required to return the system to normal operations.
|
Solution:
The vendor has issued a fixed version (5.05.202). This fix replaces the previously issued 5.05.200 fix, which contained a flaw.
The vendor has also issued the following additional fixes:
Current Version, Patched Version
4.06.225, 4.06.226
4.75.184, 4.75.185
4.76.165, 4.76.166
4.85.206, 4.85.208
4.90.315, 4.90.316
5.00.302, 5.00.303
|
Vendor URL: www.nortel.com/ (Links to External Site)
|
Cause:
Not specified
|
Underlying OS:
|
|
Message History:
None.
|
Source Message Contents
|
Date: Fri, 27 May 2005 16:35:17 -0400
Subject: [none]
|
> [ BULLETIN ] DoS Vulnerability in VPN Router
> Bulletin Type: BULLETIN
> References: None
> Priority: Major
> Status: Active
> Product Family LOB: VPN Router
> Products: VPN Router 600
> Public: Public
> Security Advisories - 2005005953 - html - May 27 2005 - 56 KB - Status
|
|
