CVE-2007-4286 Buffer overflow in the Next Hop Resolution Protocol (NHRP) functionality in Cisco IOS 12.0 through 12.4 allows remote attackers to cause a denial of service (restart) and execute arbitrary code via a....
HighCVSS 9.3
EPSS 19.4%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Buffer overflow in the Next Hop Resolution Protocol (NHRP) functionality in Cisco IOS 12.0 through 12.4 allows remote attackers to cause a denial of service (restart) and execute arbitrary code via a crafted NHRP packet.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco ios | = 12.0 | No fix listed |
| cisco ios | = 12.1 | No fix listed |
| cisco ios | = 12.2 | No fix listed |
| cisco ios | = 12.3 | No fix listed |
| cisco ios | = 12.4 | No fix listed |
References
- 26360 third-party-advisory
- 20070808 Cisco IOS Next Hop Resolution Protocol Vulnerability vendor-advisory
- VU#201984 third-party-advisory us-government-resource
- 20070809 Cisco NHRP denial of service (cisco-sa-20070808-nhrp) mailing-list
- 25238 exploit vdb-entry
- 1018535 vdb-entry
- ADV-2007-2818 vdb-entry
- cisco-ios-nexthop-bo(35889) vdb-entry
- oval:org.mitre.oval:def:5675 signature vdb-entry