exploits , vulnerabilities , articles , Cisco IOS Software Internet Key Exchange Resource Exhaustion Denial of Service Vulnerability

Title	Cisco IOS Software Internet Key Exchange Resource Exhaustion Denial of Service Vulnerability
Published	2009-09-23-12:00AM
Updated	2009-09-23-07:10PM
Class	Design Error
CVE	CVE-2009-2868
Remote	Yes
Local	No
Credit	Cisco
Vulnerable	Cisco IOS XE 2.2.3 Cisco IOS XE 2.2 Cisco IOS XE 2.1 Cisco IOS 12.4XD Cisco IOS 12.4XC Cisco IOS 12.4XB Cisco IOS 12.4XA Cisco IOS 12.4T Cisco IOS 12.4 Cisco IOS 12.3YZ Cisco IOS 12.3YX Cisco IOS 12.3YU Cisco IOS 12.3YT Cisco IOS 12.3YS Cisco IOS 12.3YQ Cisco IOS 12.3YK Cisco IOS 12.3YI Cisco IOS 12.3YH Cisco IOS 12.3YG Cisco IOS 12.3YF Cisco IOS 12.3YD Cisco IOS 12.3YA Cisco IOS 12.3XX Cisco IOS 12.3XS Cisco IOS 12.3XR Cisco IOS 12.3XL Cisco IOS 12.3T Cisco IOS 12.2XND Cisco IOS 12.2XNC Cisco IOS 12.2XNB Cisco IOS 12.2XNA Cisco IOS 12.2SXI Cisco IOS 12.2SXH Cisco IOS 12.2SRD Cisco IOS 12.2SRC Cisco IOS 12.2SRB Cisco IOS 12.2SRA Cisco IOS 12.2SE Cisco IOS 12.2SCB Cisco IOS 12.2SCA Cisco IOS 12.2SB Cisco IOS 12.2IRC Cisco IOS 12.2IRB Cisco IOS 12.2IRA Cisco IOS 12.2EX Cisco IOS 12.2(33)SXH5 Cisco IOS 12.2(33)SXH4 Cisco IOS 12.2(33)SXH3
Not Vulnerable	Cisco IOS XE 2.3.1 t Cisco IOS 12.4XN Cisco IOS 12.4(9)T Cisco IOS 12.4(7) Cisco IOS 12.4(6)T1 Cisco IOS 12.4(4)T8 Cisco IOS 12.3(8)T11 Cisco IOS 12.2(52)SE Cisco IOS 12.2(50)SE3 Cisco IOS 12.2(44)EX Cisco IOS 12.2(33)SXI2a Cisco IOS 12.2(33)SXH6 Cisco IOS 12.2(33)SRD3 Cisco IOS 12.2(33)SRD2a Cisco IOS 12.2(33)SRC5 Cisco IOS 12.2(33)SCB4 Cisco IOS 12.2(33)SB6
Code	To exploit this issue, attackers can use readily available network utilities.
TXT

Vulnerabilities - newest 10 RSS | More

2009-12-15 TYPO3 Watchdog (aba_watchdog) Unspecified Information Disclosure Vulnerability
2009-12-15 PostgreSQL Index Function Session State Modification Local Privilege Escalation Vulnerability
2009-12-15 PostgreSQL NULL Character CA SSL Certificate Validation Security Bypass Vulnerability
2009-12-15 IBM DB2 prior to 9.5 Fix Pack 5 Multiple Unspecified Security Vulnerabilities
2009-12-15 Sun Ray Server Software Desktop Session Handling Local Security Bypass Vulnerability
2009-12-15 Mozilla Firefox Sage Extension RSS Feeds Cross Domain Scripting Vulnerability
2009-12-15 Adobe Reader and Acrobat (CVE-2009-4324) Remote Code Execution Vulnerability
2009-12-14 Microsoft Protected Extensible Authentication Protocol Authentication Bypass Vulnerability
2009-12-14 Google Chrome DNS Pre-Fetching Proxy Cache Information Disclosure Vulnerability
2009-12-14 Oracle E-Business Suite Multiple Remote Vulnerabilities