https://wiki.swcp.com/w/index.php?action=history&feed=atom&title=KB_119 2026-10-06T22:38:11Z Revision history for this page on the wiki MediaWiki 1.45.1 https://wiki.swcp.com/w/index.php?title=KB_119&diff=181&oldid=prev 2008-06-04T04:56:03Z

<p>New page: ===Vulnerabilities in older versions of CBOS for Cisco 675/678 routers=== Article:119 Created:2001-05-28 14:44:32 Categories: DSL Security ====Question or Symptom==== Should I up...</p> <p><b>New page</b></p><div>===Vulnerabilities in older versions of CBOS for Cisco 675/678 routers===<br /> Article:119<br /> Created:2001-05-28 14:44:32<br /> Categories:<br /> DSL<br /> Security<br /> <br /> ====Question or Symptom====<br /> Should I upgrade the version of CBOS on my Cisco 675/678 router?<br /> <br /> <br /> ====Resolution====<br /> Here are notes from Cisco about speicfic vulnerabilities in CBOS for the<br /> Cisco 600 series routers. It is recommended that you upgrade to the<br /> latest version if you are concerned about these issues.<br /> <br /> ------------------------------------------------------------------------------<br /> Summary<br /> <br /> Multiple vulnerabilities have been identified and fixed in CBOS, an <br /> operating system for the Cisco 600 family of routers.<br /> <br /> Cisco CBOS Software contains a flaw that permits the successful <br /> prediction of TCP Initial Sequence Numbers. It only affects the<br /> security of TCP connections that originate or terminate on the <br /> affected Cisco device itself; it does not apply to TCP traffic <br /> forwarded through the affected device in transit between two other hosts.<br /> <br /> This vulnerability is documented as Cisco bug ID CSCds16078.<br /> <br /> A Cisco 600 router may stop passing the traffic and responding to <br /> the console when an ECHO REQUEST packet with the record<br /> route option is routed through it.<br /> <br /> This vulnerability is documented as Cisco bug ID CSCds30150.<br /> <br /> Passwords, exec and enable, are stored in the cleartext in the NVRAM.<br /> <br /> This vulnerability is documented as Cisco bug ID CSCdt04882.<br /> <br /> When multiple, large ECHO REPLY packets are routed through an <br /> affected Cisco 600 router, it will enter the ROMMON mode and<br /> stop passing any further traffic.<br /> <br /> This vulnerability is documented as Cisco bug ID CSCds74567.<br /> <br /> The following releases of CBOS are containing all of mentioned <br /> vulnerabilities: 2.0.1, 2.1.0, 2.1.0a, 2.2.0, 2.2.1, 2.2.1a, 2.3, <br /> 2.3.2, 2.3.5, 2.3.7<br /> and 2.3.8.<br /> <br /> These vulnerabilities are fixed in the following CBOS releases: <br /> 2.3.9, 2.4.1 and 2.4.2. Customers are urged to upgrade to releases <br /> that are not vulnerable as shown in detail in the section Software<br /> Versions and Fixes below.<br /> ------------------------------------------------------------------------------<br /> <br /> ====Related URLS====<br /> http://www.cisco.com/warp/public/707/CBOS-multiple2-pub.html<br /> <br /> <br /> ====Related KB articles====<br /> [[KB 81]] How do I configure my Cisco 675 or 678 for Megabit service?<br /> <br /> [[KB 94]] How does one set up port forwarding on the Cisco 675 router?<br /> <br /> [[KB 95]] How does one change the internal IP address of the Cisco 675 router?<br /> <br /> [[KB 104]] How do I set up a Cisco 675 or 678 router to use a routed subnet<br /> (instead of NAT)?<br /> <br /> [[KB 113]] Is the Cisco 678 configured the same as the 675 for QWest DSL?</div>

Jamii