CVE Vulnerability

CVE-2008-1156

Unspecified vulnerability in the Multicast Virtual Private Network (MVPN) implementation in Cisco IOS 12.0, 12.2, 12.3, and 12.4 allows remote attackers to create "extra multicast states on the core routers" via a crafted Multicast Distribution Tree (MDT) Data Join message.

5.1 /10

CVSS v2.0 :

V3 Legend

Vector :

Exploitability : 4.9 / Impact : 6.4

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

Scope

References
Link Resource
http://www.cisco.com/warp/public/707/cisco-sa-20080326-mvpn.shtml Patch
http://www.us-cert.gov/cas/techalerts/TA08-087B.html US Government Resource
http://www.securityfocus.com/bid/28464
http://www.securitytracker.com/id?1019715
http://secunia.com/advisories/29507
http://www.vupen.com/english/advisories/2008/1006/references
https://exchange.xforce.ibmcloud.com/vulnerabilities/41468
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5648
Configurations

Configuration 1

cpe:2.3:o:cisco:cisco_ios:12.3:*:*:*:*:*:*:*
cpe:2.3:o:cisco:cisco_ios:12.4:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios:12.2:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios:12.0:*:*:*:*:*:*:*
Information

Published : 2008-03-27 10:44

Updated : 2017-09-29 01:30

NVD link : CVE-2008-1156

Mitre link : CVE-2008-1156

Products Affected
No products.
CWE
CWE-16

CWE-200