S-262: Cisco IOS Multicast Virtual Private Network (MVPN) Data Leak

Tags

Special Forums Cybersecurity Security Advisories (RSS) S-262: Cisco IOS Multicast Virtual Private Network (MVPN) Data Leak

04-10-2008

Registered User

26,240, 27

Join Date: Sep 2000

Last Activity: 1 August 2008, 3:09 PM EDT

Posts: 26,240

Thanks Given: 0

Thanked 27 Times in 26 Posts

S-262: Cisco IOS Multicast Virtual Private Network (MVPN) Data Leak

A vulnerability in the Cisco implementation of Multicast Virtual Private Network (MVPN) is subject to exploitation that can allow a malicious user to create extra multicast states on the core routers or receive multicast traffic from other Multiprotocol Label Switching (MPLS) based Virtual Private Networks (VPN) by sending specially crafted messages. The risk is LOW. Successful exploitation of the vulnerability can result in the creation of extra multicast states on the core routers or the leaking of multicast traffic from one MPLS VPN to another.

More...

Linux Bot

View Public Profile for Linux Bot

Find all posts by Linux Bot

Previous Thread | Next Thread

4 More Discussions You Might Find Interesting

1. Solaris

Cisco IOS VPN server IKE

How do I tell if Cisco IOS VPN server IKE is running on my solaris 10 system

2. Shell Programming and Scripting

Need help on ssh login script to cisco ios

I'm trying to write a login script to ssh into a cisco switch that will run some command remotely. Similar to this expect script located here: SSH login expect shell script to supply username and password However, that script does not work with cisco ios. Anyway know what the best way to...

3. Linux

How to multicast on different IP network

On Linux, I have configured two different IP address for two network device eth0 ,eth1 , in my program, I want to multicast differently on these two network, I know it must add route for single network and I try to config another route for second network,but it can not work correctly, how to config...

4. IP Networking

private network to private network gateway

i have one private network with one ip address, and i have a seperate network on a seperate ip address. now, each network is behind a firewall/router. now what i want to do is be able to access one server on the second network from a computer on the first., but with the private ip address, (this...

LEARN ABOUT DEBIAN

gvpectrl

GVPECTRL(8)						   GNU Virtual Private Ethernet 					       GVPECTRL(8)

NAME

       gvpectrl - GNU Virtual Private Ethernet Control Program

SYNOPSIS

       gvpectrl [-ckgs] [--config=DIR] [--generate-keys] [--help] [--kill[=SIGNAL]] [--show-config] [--version]

DESCRIPTION

       This is the control program for the gvpe, the virtual private ethernet daemon.

OPTIONS

       -c, --config=DIR
	   Read configuration options from DIR.

       -g, --generate-keys
	   Generate public/private RSA key-pair and exit.

       -q, --quiet
	   Suppresses messages the author finds nonessential for scripting purposes.

       --help
	   Display short list of options.

       --kill[=SIGNAL]
	   Attempt to kill a running gvpectrl (optionally with the specified SIGNAL instead of SIGTERM) and exit.

       --show-config
	   Show a summary of the configuration, and how gvpe interprets it. Can also be very useful when designing firewall scripts.

       --version
	   Output version information and exit.

BUGS

       If you find any bugs, report them to gvpe@schmorp.de.

SEE ALSO

       gvpe(5), gvpe.conf(5), gvpe(8).

       GVPE comes with ABSOLUTELY NO WARRANTY.	This is free software, and you are welcome to redistribute it under certain conditions; see the
       file COPYING for details.

AUTHOR

       Marc Lehmann <gvpe@schmorp.de>.

2.2								    2008-09-01							       GVPECTRL(8)

Security Advisories (RSS)