----------------------------------------------------------------------

Do you have VARM strategy implemented?

(Vulnerability Assessment Remediation Management)  

If not, then implement it through the most reliable vulnerability
intelligence source on the market. 

Implement it through Secunia. 

For more information visit:
http://secunia.com/advisories/business_solutions/

Alternatively request a call from a Secunia representative today to
discuss how we can help you with our capabilities contact us at:
sales@secunia.com

----------------------------------------------------------------------

TITLE:
Cisco IOS Border Gateway Protocol Two Denial of Service
Vulnerabilities

SECUNIA ADVISORY ID:
SA36046

VERIFY ADVISORY:
http://secunia.com/advisories/36046/

DESCRIPTION:
Two vulnerabilities have been reported in Cisco IOS, which can be
exploited by malicious people to cause a DoS (Denial of Service).

1) An unspecified error exists in the processing of BGP update
messages. This can be exploited to reload an affected device via a
BGP update message that contains specially crafted AS path
information, e.g. constructed from more than 1000 autonomous
systems.

2) An unspecified error can be exploited to reload an affected device
via a specially crafted BGP update message.

Successful exploitation of these vulnerabilities requires the
following conditions:
* The affected Cisco IOS software device is a 4-byte AS number BGP
speaker.
* The BGP peering neighbor is a 2-byte AS number BGP speaker.

The vulnerabilities are reported in Cisco IOS and Cisco IOS XE with
support for RFC4893 ("BGP Support for Four-octet AS Number Space")
when being configured for BGP routing. Please see the vendor's
advisory for a complete list of affected versions.

SOLUTION:
Update to a fixed version (please see the vendor advisory for
details).

PROVIDED AND/OR DISCOVERED BY:
Reported by the vendor.

ORIGINAL ADVISORY:
http://www.cisco.com/warp/public/707/cisco-sa-20090729-bgp.shtml

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/advisories/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/advisories/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories
http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org

----------------------------------------------------------------------