Detections
Analytics
IOS Stack Group Bidding Protocol Crafted Packet DoS - Cisco Systems
high Nessus Plugin ID 48992
Language:
Synopsis
The remote device is missing a vendor-supplied security patchDescription
The Cisco IOS Stack Group Bidding Protocol (SGBP) feature in certain versions of Cisco IOS software is vulnerable to a remotely-exploitable denial of service condition. Devices that do not support or have not enabled the SGBP protocol are not affected by this vulnerability.Cisco has made free software available to address this vulnerability for affected customers. There are workarounds available to mitigate the effects of the vulnerability.
Solution
Apply the relevant patch referenced in Cisco Security Advisory cisco-sa-20060118-sgbp.See Also
Plugin Details
Severity: High
ID: 48992
File Name: cisco-sa-20060118-sgbphttp.nasl
Version: 1.20
Type: local
Family: CISCO
Published: 9/1/2010
Updated: 11/15/2018
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Low
Score: 3.6
CVSS v2
Risk Factor: High
Base Score: 7.1
Temporal Score: 5.3
Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:N/A:C
Vulnerability Information
CPE: cpe:/o:cisco:ios
Required KB Items: Host/Cisco/IOS/Version
Exploit Ease: No known exploits are available
Patch Publication Date: 1/18/2006
Vulnerability Publication Date: 1/18/2006
Reference Information
CVE: CVE-2006-0340
BID: 16303