CVE-2002-2208

ALTO 7.8CVE-2002-2208 · Published 31/12/2002 · updated 16/06/2026

In breve

CVE-2002-2208 è una vulnerabilità ALTO (CVSS 7.8) che riguarda extended interior gateway routing protocol (extended interior gateway routing protocol).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 4.3%, superiore al 91.1% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
extended interior gateway routing protocol extended_interior_gateway_routing_protocol	`= 1.2`	No fix yet

Description

Extended Interior Gateway Routing Protocol (EIGRP), as implemented in Cisco IOS 11.3 through 12.2 and other products, allows remote attackers to cause a denial of service (flood) by sending a large number of spoofed EIGRP neighbor announcements, which results in an ARP storm on the local network.

References

lists.grok.org.uk/pipermail/full-disclosure/2005-December/040330.html · Exploit
marc.info
secunia.com/advisories/7766 · Vendor Advisory
securitytracker.com/id
cisco.com/en/US/tech/tk365/technologies_security_notice09186a008011c5e1.html · Patch
cisco.com/warp/public/707/eigrp_issue.pdf · Vendor Advisory
osvdb.org/18055
securityfocus.com/archive/1/304034 · Vendor Advisory
securityfocus.com/archive/1/304044 · Patch
securityfocus.com/archive/1/419898/100/0/threaded
securityfocus.com/bid/6443
exchange.xforce.ibmcloud.com/vulnerabilities/10903

Altre vulnerabilità di extended interior gateway routing protocol

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free