CVE-2007-4430

Published: Aug 20, 2007Modified: Apr 23, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Unspecified vulnerability in Cisco IOS 12.0 through 12.4 allows context-dependent attackers to cause a denial of service (device restart and BGP routing table rebuild) via certain regular expressions in a "show ip bgp regexp" command. NOTE: unauthenticated remote attacks are possible in environments with anonymous telnet and Looking Glass access.

Affected (22)

Products: Cisco: Cbos, Cli, Ids, Ios, Ios Xr

5 products

Configuration A

22 vulnerable

Vulnerable Software	Affected Versions
Cisco Cbos	All versions
Cisco Cbos	Version 12.1
Cisco Cbos	Version 12.2
Cisco Cli	All versions
Cisco Ids	All versions
Cisco Ios	Version 10.0
Cisco Ios	Version 10.3
Cisco Ios	Version 11.0
Cisco Ios	Version 11.1
Cisco Ios	Version 11.2
Cisco Ios	Version 12.0
Cisco Ios	Version 12.1
Cisco Ios	Version 12.2
Cisco Ios	Version 12.3
Cisco Ios	Version 12.4
Cisco Ios Xr	All versions
Cisco Ios Xr	Version 2.0
Cisco Ios Xr	Version 3.0
Cisco Ios Xr	Version 3.1
Cisco Ios Xr	Version 3.2
Cisco Ios Xr	Version 3.3
Cisco Ios Xr	Version 3.4

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (18)

http://forum.cisco.com/eforum/servlet/NetProf?page=netprof&forum=Network%20Infrastructure&topic=WAN%2C%20Routing%20and%20Switching&CommCmd=MB%3Fcmd%3Ddisplay_location%26location%3D.1ddf7bc9

Source: cve@mitre.org

http://secunia.com/advisories/26798

Source: cve@mitre.org

Vendor Advisory

http://www.cisco.com/en/US/products/products_security_response09186a00808bb91c.html

Source: cve@mitre.org

http://www.heise-security.co.uk/news/94526/

Source: cve@mitre.org

http://www.securityfocus.com/bid/25352

Source: cve@mitre.org

http://www.securitytracker.com/id?1018685

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2007/3136

Source: cve@mitre.org

Vendor Advisory

https://puck.nether.net/pipermail/cisco-nsp/2007-August/043002.html

Source: cve@mitre.org

https://puck.nether.net/pipermail/cisco-nsp/2007-August/043010.html

Source: cve@mitre.org

http://forum.cisco.com/eforum/servlet/NetProf?page=netprof&forum=Network%20Infrastructure&topic=WAN%2C%20Routing%20and%20Switching&CommCmd=MB%3Fcmd%3Ddisplay_location%26location%3D.1ddf7bc9

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/26798

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.cisco.com/en/US/products/products_security_response09186a00808bb91c.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.heise-security.co.uk/news/94526/

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/25352

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id?1018685

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2007/3136

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://puck.nether.net/pipermail/cisco-nsp/2007-August/043002.html

Source: af854a3a-2127-422b-91ae-364da2661108

https://puck.nether.net/pipermail/cisco-nsp/2007-August/043010.html

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.