IPv6 Routing Header Vulnerability
High Nessus Plugin ID 48998
SynopsisThe remote device is missing a vendor-supplied security patch.
DescriptionProcessing a specially crafted IPv6 Type 0 Routing header can crash a device running Cisco IOS software. This vulnerability does not affect IPv6 Type 2 Routing headers which are used in mobile IPv6. IPv6 is not enabled by default in Cisco IOS.
Cisco has made free software available to address this vulnerability for affected customers.
SolutionApply the relevant patch referenced in Cisco Security Advisory cisco-sa-20070124-IOS-IPv6.