S-284: Border Gateway Protocol Vulnerabilities


 
Thread Tools Search this Thread
Special Forums Cybersecurity Security Advisories (RSS) S-284: Border Gateway Protocol Vulnerabilities
# 1  
Old 05-07-2008
S-284: Border Gateway Protocol Vulnerabilities

Boorder Gateway Protocol (BGP) implementations from multiple vendors including Juniper may not properly handle specially crafted BGP UPDATE messages. These vulnerabilities could allow an unauthenticated, remote attacker to cause a denial of service. Disrupting BGP communication could lead to routing instability. The risk is LOW. A remote attacker could cause a denial of servcie by injecting a specially crafted BGP UPDATE message into a legitimate BGP session. An attacker with a configured BGP session could attack targets several BGP hops away, or an attacker could spoof TCP traffic.


More...
Login or Register to Ask a Question

Previous Thread | Next Thread

6 More Discussions You Might Find Interesting

1. UNIX for Beginners Questions & Answers

Inconsistency between RedHat 6.5 global gateway and single gateway leads to loss of default gateway

Dear friends I use RedHat 6.5, which sets the gateway in the configuration file / etc / sysconfig / network as GATEWAY = 192.168.1.26, and the gateway in the configuration file / etc / sysconfig / network-scripts / ifcfg-eth11 as GATEWAY = 192.168.1.256. The two gateways are different.... (6 Replies)
Discussion started by: tanpeng
6 Replies

2. IP Networking

Regarding Protocol certiifcation

Hello Forum Members, I am siva ranganath from Hyderabad-India. I have an work experince of 4.5 years as application developer and support member in open source systems.i am good basic network programing ie applications developing in TCP/IP and i have an experince of 1 year in this N/W... (0 Replies)
Discussion started by: workforsiva
0 Replies

3. Linux

GNUGK-How to setup static gateway to gateway routing

Dear Sir I am a newbie in the world of IP telephony. I have been working with Asterisk PBX (SIP) and Cisco Call Manager (MGCP) but now I am learning on how to work GNUGK for H.323 Gatekeeper. I am having a problem, configuring static call routing on GNUGK in the section ... (0 Replies)
Discussion started by: mfondoum
0 Replies

4. Infrastructure Monitoring

SNMP protocol

dear friends , how can I use the SNMP protocol to monitor the network and send notification alerts to the clients which have windows machines. I found the utility snmp_trapsend at the directory /usr/sbin ,how can I use this command ?? my server is SUN SOLARIS. please help !!!:confused: (1 Reply)
Discussion started by: Ahmed waheed
1 Replies

5. IP Networking

protocol

iam doing a research on WAN so pliz any body can give me or tell me where i would find communication protocol map..thats all 7 layers..OIS MODEL (1 Reply)
Discussion started by: ravineelkumar
1 Replies

6. IP Networking

Protocol Numbers

I'm planning on putting together a chart of basic information (port number, protocol number, transport layer protocol, etc) on different protocols (FTP, ICMP, DNS, IP, etc) I found: http://www.phys-iasi.ro/Library/RFCs/rfc1700.htm and that tells me a little bit of information but I'm looking... (3 Replies)
Discussion started by: thmnetwork
3 Replies
Login or Register to Ask a Question
Info::Layer3(3pm)					User Contributed Perl Documentation					 Info::Layer3(3pm)

NAME
SNMP::Info::Layer3 - SNMP Interface to network devices serving Layer3 or Layers 2 & 3 AUTHOR
Max Baker SYNOPSIS
# Let SNMP::Info determine the correct subclass for you. my $l3 = new SNMP::Info( AutoSpecify => 1, Debug => 1, DestHost => 'myswitch', Community => 'public', Version => 2 ) or die "Can't connect to DestHost. "; my $class = $l3->class(); print "SNMP::Info determined this device to fall under subclass : $class "; # Let's get some basic Port information my $interfaces = $l3->interfaces(); my $i_up = $l3->i_up(); my $i_speed = $l3->i_speed(); foreach my $iid (keys %$interfaces) { my $port = $interfaces->{$iid}; my $up = $i_up->{$iid}; my $speed = $i_speed->{$iid} print "Port $port is $up. Port runs at $speed. "; } DESCRIPTION
This class is usually used as a superclass for more specific device classes listed under SNMP::Info::Layer3::* Please read all docs under SNMP::Info first. Provides generic methods for accessing SNMP data for Layer 3 network devices. Includes support for Layer2+3 devices. For speed or debugging purposes you can call the subclass directly, but not after determining a more specific class using the method above. my $l3 = new SNMP::Info::Layer3(...); Inherited Classes SNMP::Info SNMP::Info::Bridge (For L2/L3 devices) SNMP::Info::EtherLike SNMP::Info::Entity SNMP::Info::PowerEthernet SNMP::Info::IPv6 Required MIBs IP-MIB OSPF-MIB BGP4-MIB Inherited MIBs See "Required MIBs" in SNMP::Info for its MIB requirements. See "Required MIBs" in SNMP::Info::Bridge for its MIB requirements. See "Required MIBs" in SNMP::Info::EtherLike for its MIB requirements. See "Required MIBs" in SNMP::Info::Entity for its MIB requirements. See "Required MIBs" in SNMP::Info::PowerEthernet for its MIB requirements. See "Required MIBs" in SNMP::Info::IPv6 for its MIB requirements. GLOBALS
These are methods that return scalar value from SNMP $l3->mac() Returns root port mac address ("ifPhysAddress.1") $l3->router_ip() ("ospfRouterId.0") $l3->bgp_id() ("bgpIdentifier.0") Returns the BGP identifier of the local system $l3->bgp_local_as() Returns the local autonomous system number ("bgpLocalAs.0") Overrides $l3->model() Tries to reference $l3->id() to one of the product MIBs listed above Removes 'cisco' from cisco devices for readability. $l3->serial() Tries to cull a serial number from ENTITY-MIB, description, and OLD-CISCO-... MIB. $l3->vendor() Tries to cull a Vendor name from "sysDescr" $l3->root_ip() Returns the primary IP used to communicate with the device. Returns the first found: OSPF Router ID ("ospfRouterId") or any OSPF Host IP Address ("ospfHostIpAddress"). Globals imported from SNMP::Info See "GLOBALS" in SNMP::Info for details. Global Methods imported from SNMP::Info::Bridge See "GLOBALS" in SNMP::Info::Bridge for details. Global Methods imported from SNMP::Info::EtherLike See "GLOBALS" in SNMP::Info::EtherLike for details. Global Methods imported from SNMP::Info::Entity See "GLOBALS" in SNMP::Info::Entity for details. TABLE METHODS
These are methods that return tables of information in the form of a reference to a hash. Overrides $l3->interfaces() Returns the map between SNMP Interface Identifier (iid) and physical port name. Only returns those iids that have a description listed in $l3->i_description() $l3->i_ignore() Returns reference to hash. Creates a key for each IID that should be ignored. Currently looks for tunnel,loopback,lo,null from $l3->interfaces() $l3->i_name() Returns reference to hash of iid to human set name. Defaults to "ifName", but checks for an "ifAlias" $l3->i_duplex() Returns reference to hash of iid to current link duplex setting. Maps $l3->el_index() to $l3->el_duplex, then culls out full,half, or auto and sets the map to that value. See SNMP::Info::Etherlike for the el_index() and el_duplex() methods. IP-MIB Arp Cache Table ("ipNetToMediaTable") $l3->at_index() Returns reference to hash. Maps ARP table entries to Interface IIDs ("ipNetToMediaIfIndex") If the device doesn't support "ipNetToMediaIfIndex", this will try the deprecated "atIfIndex". $l3->at_paddr() Returns reference to hash. Maps ARP table entries to MAC addresses. ("ipNetToMediaPhysAddress") If the device doesn't support "ipNetToMediaPhysAddress", this will try the deprecated "atPhysAddress". $l3->at_netaddr() Returns reference to hash. Maps ARP table entries to IP addresses. ("ipNetToMediaNetAddress") If the device doesn't support "ipNetToMediaNetAddress", this will try the deprecated "atNetAddress". ARP Cache Entries The "atTable" has been deprecated since 1991. You should never need to use these methods. See "ipNetToMediaTable" above. $l3->old_at_index() Returns reference to map of IID to Arp Cache Entry ("atIfIndex") $l3->old_at_paddr() Returns reference to hash of Arp Cache Entries to MAC address ("atPhysAddress") $l3->old_at_netaddr() Returns reference to hash of Arp Cache Entries to IP Address ("atNetAddress") BGP Peer Table ("bgpPeerTable") $l3->bgp_peers() Returns reference to hash of BGP peer to local IP address ("bgpPeerLocalAddr") $l3->bgp_peer_id() Returns reference to hash of BGP peer to BGP peer identifier ("bgpPeerIdentifier") $l3->bgp_peer_state() Returns reference to hash of BGP peer to BGP peer state ("bgpPeerState") $l3->bgp_peer_as() Returns reference to hash of BGP peer to BGP peer autonomous system number ("bgpPeerRemoteAs") $l3->bgp_peer_addr() Returns reference to hash of BGP peer to BGP peer IP address ("bgpPeerRemoteAddr") $l3->bgp_peer_fsm_est_trans() Returns reference to hash of BGP peer to the total number of times the BGP FSM transitioned into the established state ("bgpPeerFsmEstablishedTransitions") $l3->bgp_peer_in_tot_msgs() Returns reference to hash of BGP peer to the total number of messages received from the remote peer on this connection ("bgpPeerInTotalMessages") $l3->bgp_peer_in_upd_el_time() Returns reference to hash of BGP peer to the elapsed time in seconds since the last BGP UPDATE message was received from the peer. ("bgpPeerInUpdateElapsedTime") $l3->bgp_peer_in_upd() Returns reference to hash of BGP peer to the number of BGP UPDATE messages received on this connection ("bgpPeerInUpdates") $l3->bgp_peer_out_tot_msgs() Returns reference to hash of BGP peer to the total number of messages transmitted to the remote peer on this connection ("bgpPeerOutTotalMessages") $l3->bgp_peer_out_upd() Returns reference to hash of BGP peer to the number of BGP UPDATE messages transmitted on this connection ("bgpPeerOutUpdates") OSPF Interface Table ("ospfIfTable") $l3->ospf_if_ip() Returns reference to hash of OSPF interface IP addresses ("ospfIfIpAddress") $l3->ospf_if_area() Returns reference to hash of the OSPF area to which the interfaces connect ("ospfIfAreaId") $l3->ospf_if_type() Returns reference to hash of the OSPF interfaces' type ("ospfIfType") $l3->ospf_if_hello() Returns reference to hash of the OSPF interfaces' hello interval ("ospfIfHelloInterval") $l3->ospf_if_dead() Returns reference to hash of the OSPF interfaces' dead interval ("ospfIfRtrDeadInterval") $l3->ospf_if_admin() Returns reference to hash of the OSPF interfaces' administrative status ("ospfIfAdminStat") $l3->ospf_if_state() Returns reference to hash of the OSPF interfaces' state ("ospfIfState") OSPF Neighbor Table ("ospfNbrTable") $l3->ospf_peers() Returns reference to hash of IP addresses the neighbor is using in its IP Source Addresses ("ospfNbrIpAddr") $l3->ospf_peer_id() Returns reference to hash of neighbor Router IDs ("ospfNbrRtrId") $l3->ospf_peer_state() Returns reference to hash of state of the relationship with the neighbor routers ("ospfNbrState") Table Methods imported from SNMP::Info See "TABLE METHODS" in SNMP::Info for details. Table Methods imported from SNMP::Info::Bridge See "TABLE METHODS" in SNMP::Info::Bridge for details. Table Methods imported from SNMP::Info::EtherLike See "TABLE METHODS" in SNMP::Info::EtherLike for details. Table Methods imported from SNMP::Info::Entity See "TABLE METHODS" in SNMP::Info::Entity for details. Table Methods imported from SNMP::Info::PowerEthernet See "TABLE METHODS" in SNMP::Info::PowerEthernet for details. Table Methods imported from SNMP::Info::IPv6 See "TABLE METHODS" in SNMP::Info::IPv6 for details. perl v5.12.4 2011-09-28 Info::Layer3(3pm)