Detections
Analytics
Cisco IOS Software TCP Initial Sequence Number Randomization Improvements - Cisco Systems
high Nessus Plugin ID 48953
Language:
Synopsis
The remote device is missing a vendor-supplied security patchDescription
Cisco IOS Software contains a flaw that permits the successful prediction of TCP Initial Sequence Numbers. This vulnerability is present in all released versions of Cisco IOS software running on Cisco routers and switches. It only affects the security of TCP connections that originate or terminate on the affected Cisco device itself; it does not apply to TCP traffic forwarded through the affected device in transit between two other hosts. To remove the vulnerability, Cisco is offering free software upgrades for all affected platforms. The defect is described in DDTS record CSCds04747.Workarounds are available that limit or deny successful exploitation of the vulnerability by filtering traffic containing forged IP source addresses at the perimeter of a network or directly on individual devices.
Solution
Apply the relevant patch referenced in Cisco Security Advisory cisco-sa-20010301-ios-tcp-isn-random.See Also
Plugin Details
Severity: High
ID: 48953
File Name: cisco-sa-20010301-ios-tcp-isn-randomhttp.nasl
Version: 1.12
Type: local
Family: CISCO
Published: 9/1/2010
Updated: 11/15/2018
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 6.6
CVSS v2
Risk Factor: High
Base Score: 7.5
Temporal Score: 5.9
Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P
Vulnerability Information
CPE: cpe:/o:cisco:ios
Required KB Items: Host/Cisco/IOS/Version
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 3/1/2001
Vulnerability Publication Date: 3/1/2001
Reference Information
CVE: CVE-2001-0288
BID: 2682