Cisco Advisory III :Multiple Multicast Vulnerabilities in Cisco IOS Software

Summary

Two crafted Protocol Independent Multicast (PIM) packet vulnerabilities exist in Cisco IOS software that may lead to a denial of service (DoS) condition. Cisco has released free software updates that address these vulnerabilities. Workarounds that mitigate these vulnerabilities are available.

This advisory is posted at http://www.cisco.com/warp/public/707/cisco-sa-20080924-multicast.shtml.

Note: The September 24, 2008 IOS Advisory bundled publication includes twelve Security Advisories. Eleven of the advisories address vulnerabilities in Cisco's IOS software, and one advisory addresses vulnerabilities in Cisco Unified Communications Manager. Each Advisory lists the releases that correct the vulnerability described in the Advisory. Please reference the following software table to find a release that fixes all published IOS software Advisories as of September 24th, 2008:

• http://www.cisco.com/warp/public/707/cisco-sa-20080924-iosips.shtml
  
• http://www.cisco.com/warp/public/707/cisco-sa-20080924-ssl.shtml
  
• http://www.cisco.com/warp/public/707/cisco-sa-20080924-sip.shtml
  
• http://www.cisco.com/warp/public/707/cisco-sa-20080924-cucm.shtml
  
• http://www.cisco.com/warp/public/707/cisco-sa-20080924-vpn.shtml
  
• http://www.cisco.com/warp/public/707/cisco-sa-20080924-mfi.shtml
  
• http://www.cisco.com/warp/public/707/cisco-sa-20080924-ipc.shtml
  
• http://www.cisco.com/warp/public/707/cisco-sa-20080924-ubr.shtml
  
• http://www.cisco.com/warp/public/707/cisco-sa-20080924-sccp.shtml
  
• http://www.cisco.com/warp/public/707/cisco-sa-20080924-iosfw.shtml
  
• http://www.cisco.com/warp/public/707/cisco-sa-20080924-l2tp.shtml