Cisco's DNS implementation in certain products contains a flaw that may allow a remote denial of service. The issue is triggered when an attacker sends a specially crafted DNS packet(s), and will result in loss of availability for the devices. No further details have been provided.

Upgrade to the respective version(s) documented in the Cisco software matrix or higher, as they have been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

• Security Tracker: 1014043 1014044 1014045 1014046 1015975
• Bugtraq ID: 13729
• SCIP VulDB ID: 1519
• Secunia Advisory ID: 15472
• Related OSVDB ID: 19004 19005
• CVE ID: 2005-0036 (see also: NVD) 2005-4794 (see also: NVD)
• Mail List Post: http://attrition.org/pipermail/vim/2006-April/000735.html
• Vendor Specific Advisory URL: http://www.cisco.com/warp/public/707/cisco-sn-20050524-dns.shtml
• Other Advisory URL: http://www.niscc.gov.uk/niscc/docs/al-20050524-00433.html
  http://www.niscc.gov.uk/niscc/docs/re-20050524-00432.pdf
  http://www.securiteam.com/securitynews/5XP0S1PFPY.html

• Steve Beaty - beatysmscd.edu - Metropolitan State College of Denver