Cisco Catalyst 2900XL crashes with empty UDP packet when SNMP is disabled.

From: J.S. Morrison (highlanderat_private)
Date: Wed May 16 2001 - 02:28:37 PDT

Next message: Philip Stoev: "Re: IE 5.x (5.50.4522.1800 SP1) Crash at gopher://:"

Previous message: PJD@portcullis-security.com: "RE: PHP Disclosure issue"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Hi

It's possible to crash Cisco Catalyst 2900XL with a empty UDP
packet to port 161 when SNMP is disabled. (Other switches also?)

The crash only occurs when the switch is booted with SNMP disabled.
Seems that SNMP is listening, even if SNMP is disabled.. (?)

I have only tested this with Software Version 12.0(5.2)XU,
on my WS-C2924C-XL-EN switch.

Workaround: Enable SNMP, or enable SNMP and then disable SNMP.

Vendor notified 19 April 2001.
No response yet.

A simple empty UDP packet sender included.

--
\0x62\0x61\0x73\0x68\0x69\0x73

application/octet-stream attachment: gzip compressed data, deflated, last modified: Thu May 3 00:03:58 2001, os: Unix

Next message: Philip Stoev: "Re: IE 5.x (5.50.4522.1800 SP1) Crash at gopher://:"
Previous message: PJD@portcullis-security.com: "RE: PHP Disclosure issue"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Thu May 17 2001 - 13:00:00 PDT