Cisco CatOS 5.x before 5.5(20) through 8.x before 8.2(2) and 8.3(2)GLX, as used in Catalyst switches, allows remote attackers to cause a denial of service (system crash and reload) by sending invalid packets instead of the final ACK portion of the three-way handshake to the (1) Telnet, (2) HTTP, or (3) SSH services, aka TCP-ACK DoS attack.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Catos | Cisco | 2.1(1) (including) | 2.1(1) (including) |
| Catos | Cisco | 2.1(2) (including) | 2.1(2) (including) |
| Catos | Cisco | 2.1(3) (including) | 2.1(3) (including) |
| Catos | Cisco | 2.1(4) (including) | 2.1(4) (including) |
| Catos | Cisco | 2.1(5) (including) | 2.1(5) (including) |
| Catos | Cisco | 2.1(6) (including) | 2.1(6) (including) |
| Catos | Cisco | 2.1(7) (including) | 2.1(7) (including) |
| Catos | Cisco | 2.1(8) (including) | 2.1(8) (including) |
| Catos | Cisco | 2.1(9) (including) | 2.1(9) (including) |
| Catos | Cisco | 2.1(10) (including) | 2.1(10) (including) |
| Catos | Cisco | 2.1(11) (including) | 2.1(11) (including) |
| Catos | Cisco | 2.1(12) (including) | 2.1(12) (including) |
| Catos | Cisco | 2.2(1) (including) | 2.2(1) (including) |
| Catos | Cisco | 2.2(2) (including) | 2.2(2) (including) |
| Catos | Cisco | 2.3(1) (including) | 2.3(1) (including) |
| Catos | Cisco | 2.4(1) (including) | 2.4(1) (including) |
| Catos | Cisco | 2.4(2) (including) | 2.4(2) (including) |
| Catos | Cisco | 2.4(3) (including) | 2.4(3) (including) |
| Catos | Cisco | 2.4(4) (including) | 2.4(4) (including) |
| Catos | Cisco | 2.4(5) (including) | 2.4(5) (including) |
| Catos | Cisco | 2.4(5a) (including) | 2.4(5a) (including) |
| Catos | Cisco | 3.0(7) (including) | 3.0(7) (including) |
| Catos | Cisco | 3.1(1) (including) | 3.1(1) (including) |
| Catos | Cisco | 3.1(2) (including) | 3.1(2) (including) |
| Catos | Cisco | 3.1(2a) (including) | 3.1(2a) (including) |
| Catos | Cisco | 3.2(1) (including) | 3.2(1) (including) |
| Catos | Cisco | 3.2(1b) (including) | 3.2(1b) (including) |
| Catos | Cisco | 3.2(2) (including) | 3.2(2) (including) |
| Catos | Cisco | 3.2(3) (including) | 3.2(3) (including) |
| Catos | Cisco | 3.2(4) (including) | 3.2(4) (including) |
| Catos | Cisco | 3.2(5) (including) | 3.2(5) (including) |
| Catos | Cisco | 3.2(6) (including) | 3.2(6) (including) |
| Catos | Cisco | 3.2(7) (including) | 3.2(7) (including) |
| Catos | Cisco | 3.2(8)gdr (including) | 3.2(8)gdr (including) |
| Catos | Cisco | 4.1(1) (including) | 4.1(1) (including) |
| Catos | Cisco | 4.1(2) (including) | 4.1(2) (including) |
| Catos | Cisco | 4.1(3) (including) | 4.1(3) (including) |
| Catos | Cisco | 4.2(1) (including) | 4.2(1) (including) |
| Catos | Cisco | 4.2(2) (including) | 4.2(2) (including) |
| Catos | Cisco | 4.3(1a) (including) | 4.3(1a) (including) |
| Catos | Cisco | 4.4(1) (including) | 4.4(1) (including) |
| Catos | Cisco | 4.5(1) (including) | 4.5(1) (including) |
| Catos | Cisco | 4.5(2) (including) | 4.5(2) (including) |
| Catos | Cisco | 4.5(3) (including) | 4.5(3) (including) |
| Catos | Cisco | 4.5(4) (including) | 4.5(4) (including) |
| Catos | Cisco | 4.5(5) (including) | 4.5(5) (including) |
| Catos | Cisco | 4.5(6) (including) | 4.5(6) (including) |
| Catos | Cisco | 4.5(6a) (including) | 4.5(6a) (including) |
| Catos | Cisco | 4.5(7) (including) | 4.5(7) (including) |
| Catos | Cisco | 4.5(8) (including) | 4.5(8) (including) |
| Catos | Cisco | 4.5(9) (including) | 4.5(9) (including) |
| Catos | Cisco | 4.5(10) (including) | 4.5(10) (including) |
| Catos | Cisco | 4.5(11) (including) | 4.5(11) (including) |
| Catos | Cisco | 4.5(12) (including) | 4.5(12) (including) |
| Catos | Cisco | 4.5(12a) (including) | 4.5(12a) (including) |
| Catos | Cisco | 4.5(13) (including) | 4.5(13) (including) |
| Catos | Cisco | 4.5(13a) (including) | 4.5(13a) (including) |
| Catos | Cisco | 4.5(14) (including) | 4.5(14) (including) |
| Catos | Cisco | 5.1(1) (including) | 5.1(1) (including) |
| Catos | Cisco | 5.1(1)csx (including) | 5.1(1)csx (including) |
| Catos | Cisco | 5.1(1a) (including) | 5.1(1a) (including) |
| Catos | Cisco | 5.1(1a)csx (including) | 5.1(1a)csx (including) |
| Catos | Cisco | 5.1(2a) (including) | 5.1(2a) (including) |
| Catos | Cisco | 5.1(2b) (including) | 5.1(2b) (including) |
| Catos | Cisco | 5.2(1) (including) | 5.2(1) (including) |
| Catos | Cisco | 5.2(1)csx (including) | 5.2(1)csx (including) |
| Catos | Cisco | 5.2(2) (including) | 5.2(2) (including) |
| Catos | Cisco | 5.2(2)csx (including) | 5.2(2)csx (including) |
| Catos | Cisco | 5.2(3) (including) | 5.2(3) (including) |
| Catos | Cisco | 5.2(3)csx (including) | 5.2(3)csx (including) |
| Catos | Cisco | 5.2(3a)csx (including) | 5.2(3a)csx (including) |
| Catos | Cisco | 5.2(4) (including) | 5.2(4) (including) |
| Catos | Cisco | 5.2(5) (including) | 5.2(5) (including) |
| Catos | Cisco | 5.2(6) (including) | 5.2(6) (including) |
| Catos | Cisco | 5.2(7) (including) | 5.2(7) (including) |
| Catos | Cisco | 5.2(7a) (including) | 5.2(7a) (including) |
| Catos | Cisco | 5.3(1a)csx (including) | 5.3(1a)csx (including) |
| Catos | Cisco | 5.3(2)csx (including) | 5.3(2)csx (including) |
| Catos | Cisco | 5.3(3)csx (including) | 5.3(3)csx (including) |
| Catos | Cisco | 5.3(4)csx (including) | 5.3(4)csx (including) |
| Catos | Cisco | 5.3(5)csx (including) | 5.3(5)csx (including) |
| Catos | Cisco | 5.3(5a)csx (including) | 5.3(5a)csx (including) |
| Catos | Cisco | 5.3(6)csx (including) | 5.3(6)csx (including) |
| Catos | Cisco | 5.3(6a)csx (including) | 5.3(6a)csx (including) |
| Catos | Cisco | 5.4 (including) | 5.4 (including) |
| Catos | Cisco | 5.4(1) (including) | 5.4(1) (including) |
| Catos | Cisco | 5.4(1)deferred (including) | 5.4(1)deferred (including) |
| Catos | Cisco | 5.4(2) (including) | 5.4(2) (including) |
| Catos | Cisco | 5.4(2a) (including) | 5.4(2a) (including) |
| Catos | Cisco | 5.4(3) (including) | 5.4(3) (including) |
| Catos | Cisco | 5.4(4) (including) | 5.4(4) (including) |
| Catos | Cisco | 5.4(4a) (including) | 5.4(4a) (including) |
| Catos | Cisco | 5.5 (including) | 5.5 (including) |
| Catos | Cisco | 5.5(1) (including) | 5.5(1) (including) |
| Catos | Cisco | 5.5(1a) (including) | 5.5(1a) (including) |
| Catos | Cisco | 5.5(2) (including) | 5.5(2) (including) |
| Catos | Cisco | 5.5(3) (including) | 5.5(3) (including) |
| Catos | Cisco | 5.5(4) (including) | 5.5(4) (including) |
| Catos | Cisco | 5.5(4a) (including) | 5.5(4a) (including) |
| Catos | Cisco | 5.5(4b) (including) | 5.5(4b) (including) |
| Catos | Cisco | 5.5(5) (including) | 5.5(5) (including) |
| Catos | Cisco | 5.5(6) (including) | 5.5(6) (including) |
| Catos | Cisco | 5.5(6a) (including) | 5.5(6a) (including) |
| Catos | Cisco | 5.5(7) (including) | 5.5(7) (including) |
| Catos | Cisco | 5.5(7a) (including) | 5.5(7a) (including) |
| Catos | Cisco | 5.5(8) (including) | 5.5(8) (including) |
| Catos | Cisco | 5.5(8a) (including) | 5.5(8a) (including) |
| Catos | Cisco | 5.5(8a)cv (including) | 5.5(8a)cv (including) |
| Catos | Cisco | 5.5(9) (including) | 5.5(9) (including) |
| Catos | Cisco | 5.5(10) (including) | 5.5(10) (including) |
| Catos | Cisco | 5.5(10a) (including) | 5.5(10a) (including) |
| Catos | Cisco | 5.5(11) (including) | 5.5(11) (including) |
| Catos | Cisco | 5.5(11a) (including) | 5.5(11a) (including) |
| Catos | Cisco | 5.5(12) (including) | 5.5(12) (including) |
| Catos | Cisco | 5.5(12a) (including) | 5.5(12a) (including) |
| Catos | Cisco | 5.5(13) (including) | 5.5(13) (including) |
| Catos | Cisco | 5.5(13.5) (including) | 5.5(13.5) (including) |
| Catos | Cisco | 5.5(13a) (including) | 5.5(13a) (including) |
| Catos | Cisco | 5.5(14) (including) | 5.5(14) (including) |
| Catos | Cisco | 5.5(15) (including) | 5.5(15) (including) |
| Catos | Cisco | 5.5(16) (including) | 5.5(16) (including) |
| Catos | Cisco | 5.5(16.2) (including) | 5.5(16.2) (including) |
| Catos | Cisco | 5.5(17) (including) | 5.5(17) (including) |
| Catos | Cisco | 5.5(18) (including) | 5.5(18) (including) |
| Catos | Cisco | 5.5(19) (including) | 5.5(19) (including) |
| Catos | Cisco | 6.1 (including) | 6.1 (including) |
| Catos | Cisco | 6.1(1) (including) | 6.1(1) (including) |
| Catos | Cisco | 6.1(1a) (including) | 6.1(1a) (including) |
| Catos | Cisco | 6.1(1b) (including) | 6.1(1b) (including) |
| Catos | Cisco | 6.1(1c) (including) | 6.1(1c) (including) |
| Catos | Cisco | 6.1(1d) (including) | 6.1(1d) (including) |
| Catos | Cisco | 6.1(1e) (including) | 6.1(1e) (including) |
| Catos | Cisco | 6.1(2) (including) | 6.1(2) (including) |
| Catos | Cisco | 6.1(2a) (including) | 6.1(2a) (including) |
| Catos | Cisco | 6.1(3) (including) | 6.1(3) (including) |
| Catos | Cisco | 6.1(3a) (including) | 6.1(3a) (including) |
| Catos | Cisco | 6.1(4) (including) | 6.1(4) (including) |
| Catos | Cisco | 6.1(4b) (including) | 6.1(4b) (including) |
| Catos | Cisco | 6.2(1) (including) | 6.2(1) (including) |
| Catos | Cisco | 6.2(1a) (including) | 6.2(1a) (including) |
| Catos | Cisco | 6.2(2) (including) | 6.2(2) (including) |
| Catos | Cisco | 6.2(2a) (including) | 6.2(2a) (including) |
| Catos | Cisco | 6.2(3) (including) | 6.2(3) (including) |
| Catos | Cisco | 6.2(3a) (including) | 6.2(3a) (including) |
| Catos | Cisco | 6.3(1) (including) | 6.3(1) (including) |
| Catos | Cisco | 6.3(1a) (including) | 6.3(1a) (including) |
| Catos | Cisco | 6.3(2) (including) | 6.3(2) (including) |
| Catos | Cisco | 6.3(2a) (including) | 6.3(2a) (including) |
| Catos | Cisco | 6.3(3) (including) | 6.3(3) (including) |
| Catos | Cisco | 6.3(3)x (including) | 6.3(3)x (including) |
| Catos | Cisco | 6.3(3)x1 (including) | 6.3(3)x1 (including) |
| Catos | Cisco | 6.3(3a) (including) | 6.3(3a) (including) |
| Catos | Cisco | 6.3(4) (including) | 6.3(4) (including) |
| Catos | Cisco | 6.3(4a) (including) | 6.3(4a) (including) |
| Catos | Cisco | 6.3(5) (including) | 6.3(5) (including) |
| Catos | Cisco | 6.3(5.10) (including) | 6.3(5.10) (including) |
| Catos | Cisco | 6.3(6) (including) | 6.3(6) (including) |
| Catos | Cisco | 6.3(7) (including) | 6.3(7) (including) |
| Catos | Cisco | 6.3(8) (including) | 6.3(8) (including) |
| Catos | Cisco | 6.3(8.3) (including) | 6.3(8.3) (including) |
| Catos | Cisco | 6.3(9) (including) | 6.3(9) (including) |
| Catos | Cisco | 6.3(10) (including) | 6.3(10) (including) |
| Catos | Cisco | 6.4(1) (including) | 6.4(1) (including) |
| Catos | Cisco | 6.4(2) (including) | 6.4(2) (including) |
| Catos | Cisco | 6.4(3) (including) | 6.4(3) (including) |
| Catos | Cisco | 6.4(4a) (including) | 6.4(4a) (including) |
| Catos | Cisco | 6.4(5) (including) | 6.4(5) (including) |
| Catos | Cisco | 6.4(6) (including) | 6.4(6) (including) |
| Catos | Cisco | 6.4(7) (including) | 6.4(7) (including) |
| Catos | Cisco | 6.4(8) (including) | 6.4(8) (including) |
| Catos | Cisco | 7.1(1) (including) | 7.1(1) (including) |
| Catos | Cisco | 7.1(1a) (including) | 7.1(1a) (including) |
| Catos | Cisco | 7.1(2) (including) | 7.1(2) (including) |
| Catos | Cisco | 7.1(2a) (including) | 7.1(2a) (including) |
| Catos | Cisco | 7.2(0.65) (including) | 7.2(0.65) (including) |
| Catos | Cisco | 7.2(1) (including) | 7.2(1) (including) |
| Catos | Cisco | 7.2(2) (including) | 7.2(2) (including) |
| Catos | Cisco | 7.3 (including) | 7.3 (including) |
| Catos | Cisco | 7.3(1) (including) | 7.3(1) (including) |
| Catos | Cisco | 7.3(2) (including) | 7.3(2) (including) |
| Catos | Cisco | 7.4 (including) | 7.4 (including) |
| Catos | Cisco | 7.4(0.2)clr (including) | 7.4(0.2)clr (including) |
| Catos | Cisco | 7.4(0.63) (including) | 7.4(0.63) (including) |
| Catos | Cisco | 7.4(1) (including) | 7.4(1) (including) |
| Catos | Cisco | 7.4(2) (including) | 7.4(2) (including) |
| Catos | Cisco | 7.4(3) (including) | 7.4(3) (including) |
| Catos | Cisco | 7.5 (including) | 7.5 (including) |
| Catos | Cisco | 7.5(1) (including) | 7.5(1) (including) |
| Catos | Cisco | 7.6 (including) | 7.6 (including) |
| Catos | Cisco | 7.6(1) (including) | 7.6(1) (including) |
| Catos | Cisco | 7.6(2) (including) | 7.6(2) (including) |
| Catos | Cisco | 7.6(3) (including) | 7.6(3) (including) |
| Catos | Cisco | 7.6(4) (including) | 7.6(4) (including) |
| Catos | Cisco | 7.6(5) (including) | 7.6(5) (including) |
| Catos | Cisco | 8.1 (including) | 8.1 (including) |
| Catos | Cisco | 8.1(2) (including) | 8.1(2) (including) |
| Catos | Cisco | 8.1(3) (including) | 8.1(3) (including) |
| Catos | Cisco | 8.2 (including) | 8.2 (including) |
| Catos | Cisco | 8.2(1) (including) | 8.2(1) (including) |
| Catos | Cisco | 8.3(1)glx (including) | 8.3(1)glx (including) |
| Catos | Cisco | 8.3glx (including) | 8.3glx (including) |
References
- http://www.cisco.com/warp/public/707/cisco-sa-20040609-catos.shtml
- http://www.kb.cert.org/vuls/id/245190
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16370
- http://www.cisco.com/warp/public/707/cisco-sa-20040609-catos.shtml
- http://www.kb.cert.org/vuls/id/245190
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16370