>> Cisco IOS malformed BGP packet Denial of Service Vulnerability
Title : Cisco IOS malformed BGP packet Denial of Service Vulnerability VUPEN ID : VUPEN/ADV-2005-0065 CVE ID : CVE-2005-0196 CWE ID : CWE-
Rated as : Moderate Risk
Remotely Exploitable : Yes Locally Exploitable : Yes Release Date : 2005-01-27
Technical Description
A new vulnerability has been identified in Cisco IOS, which can be exploited by attackers to cause a Denial of Service. An affected Cisco device running a vulnerable version of Cisco IOS software with the BGP protocol enabled will reload if a malformed BGP packet is already queued on the interface when a BGP neighbor change is logged.
The device is not vulnerable unless the command bgp log-neighbor-changes is configured.
