CVE-2006-1928 - Vulnerability Details - OpenCVE

Cisco IOS XR, when configured for Multi Protocol Label Switching (MPLS) and running on Cisco CRS-1 routers, allows remote attackers to cause a denial of service (Modular Services Cards (MSC) crash or "MPLS packet handling problems") via certain MPLS packets, as identified by Cisco bug IDs (1) CSCsd15970 and (2) CSCsd55531.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact None

Integrity Impact None

Availability Impact Partial

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Cisco	Ios Xr

Configuration 1 [-]

OR	cpe:2.3:o:cisco:ios_xr:3.0.1:::::::*
	cpe:2.3:o:cisco:ios_xr:3.1.0:::::::*
	cpe:2.3:o:cisco:ios_xr:3.2:::::::*
	cpe:2.3:o:cisco:ios_xr:3.2.1:::::::*
	cpe:2.3:o:cisco:ios_xr:3.2.2:::::::*
	cpe:2.3:o:cisco:ios_xr:3.2.3::crs-1:::::
	cpe:2.3:o:cisco:ios_xr:3.2.3::prp:::::
	cpe:2.3:o:cisco:ios_xr:3.2.4:::::::*
	cpe:2.3:o:cisco:ios_xr:3.2.50:::::::*

No data.

References

Link	Providers
http://secunia.com/advisories/19740
http://securitytracker.com/id?1015964
http://www.cisco.com/warp/public/707/cisco-sa-20060419-xr.shtml
http://www.osvdb.org/24811
http://www.securityfocus.com/bid/17607
http://www.vupen.com/english/advisories/2006/1433
https://exchange.xforce.ibmcloud.com/vulnerabilities/25881

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2006-04-20T18:00:00

Updated: 2024-08-07T17:27:29.587Z

Reserved: 2006-04-20T00:00:00

Link: CVE-2006-1928

Vulnrichment

No data.

NVD

Status : Modified

Published: 2006-04-20T18:06:00.000

Modified: 2024-11-21T00:10:06.957

Link: CVE-2006-1928

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2006-04-19T00:00:00", "descriptions": [{"lang": "en", "value": "Cisco IOS XR, when configured for Multi Protocol Label Switching (MPLS) and running on Cisco CRS-1 routers, allows remote attackers to cause a denial of service (Modular Services Cards (MSC) crash or \"MPLS packet handling problems\") via certain MPLS packets, as identified by Cisco bug IDs (1) CSCsd15970 and (2) CSCsd55531."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-07-19T15:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "ADV-2006-1433", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2006/1433"}, {"name": "1015964", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://securitytracker.com/id?1015964"}, {"name": "17607", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/17607"}, {"name": "cisco-iosxr-mpls-dos(25881)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25881"}, {"name": "19740", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/19740"}, {"name": "20060419 Cisco IOS XR MPLS Vulnerabilities", "tags": ["vendor-advisory", "x_refsource_CISCO"], "url": "http://www.cisco.com/warp/public/707/cisco-sa-20060419-xr.shtml"}, {"name": "24811", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/24811"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2006-1928", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Cisco IOS XR, when configured for Multi Protocol Label Switching (MPLS) and running on Cisco CRS-1 routers, allows remote attackers to cause a denial of service (Modular Services Cards (MSC) crash or \"MPLS packet handling problems\") via certain MPLS packets, as identified by Cisco bug IDs (1) CSCsd15970 and (2) CSCsd55531."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "ADV-2006-1433", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2006/1433"}, {"name": "1015964", "refsource": "SECTRACK", "url": "http://securitytracker.com/id?1015964"}, {"name": "17607", "refsource": "BID", "url": "http://www.securityfocus.com/bid/17607"}, {"name": "cisco-iosxr-mpls-dos(25881)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25881"}, {"name": "19740", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/19740"}, {"name": "20060419 Cisco IOS XR MPLS Vulnerabilities", "refsource": "CISCO", "url": "http://www.cisco.com/warp/public/707/cisco-sa-20060419-xr.shtml"}, {"name": "24811", "refsource": "OSVDB", "url": "http://www.osvdb.org/24811"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T17:27:29.587Z"}, "title": "CVE Program Container", "references": [{"name": "ADV-2006-1433", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2006/1433"}, {"name": "1015964", "tags": ["vdb-entry", "x_refsource_SECTRACK", "x_transferred"], "url": "http://securitytracker.com/id?1015964"}, {"name": "17607", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/17607"}, {"name": "cisco-iosxr-mpls-dos(25881)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25881"}, {"name": "19740", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/19740"}, {"name": "20060419 Cisco IOS XR MPLS Vulnerabilities", "tags": ["vendor-advisory", "x_refsource_CISCO", "x_transferred"], "url": "http://www.cisco.com/warp/public/707/cisco-sa-20060419-xr.shtml"}, {"name": "24811", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/24811"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2006-1928", "datePublished": "2006-04-20T18:00:00", "dateReserved": "2006-04-20T00:00:00", "dateUpdated": "2024-08-07T17:27:29.587Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cisco:ios_xr:3.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "778F5573-0741-442F-AFFA-937053F8280C", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xr:3.1.0:*:*:*:*:*:*:*", "matchCriteriaId": "ADF0D7F5-7A9C-4E58-A9DB-33BF13CE135D", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xr:3.2:*:*:*:*:*:*:*", "matchCriteriaId": "8D69F8FA-D58A-4F53-86D8-A20C73E9B299", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xr:3.2.1:*:*:*:*:*:*:*", "matchCriteriaId": "C46BE68F-FFA9-4DF0-B407-1F5576047B6C", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xr:3.2.2:*:*:*:*:*:*:*", "matchCriteriaId": "A88B45F0-B1D1-4680-A29E-2C8A167573D2", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xr:3.2.3:*:crs-1:*:*:*:*:*", "matchCriteriaId": "FBBD93B6-100E-481D-AE0A-FE65971A2280", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xr:3.2.3:*:prp:*:*:*:*:*", "matchCriteriaId": "E20FBF42-CC47-40E8-94A4-F6323886151C", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xr:3.2.4:*:*:*:*:*:*:*", "matchCriteriaId": "265062D1-20BB-4B51-9407-AAA8F83A4D08", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xr:3.2.50:*:*:*:*:*:*:*", "matchCriteriaId": "9FDF9D75-6713-427F-A65F-1D59911A410B", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Cisco IOS XR, when configured for Multi Protocol Label Switching (MPLS) and running on Cisco CRS-1 routers, allows remote attackers to cause a denial of service (Modular Services Cards (MSC) crash or \"MPLS packet handling problems\") via certain MPLS packets, as identified by Cisco bug IDs (1) CSCsd15970 and (2) CSCsd55531."}], "id": "CVE-2006-1928", "lastModified": "2024-11-21T00:10:06.957", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.0, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2006-04-20T18:06:00.000", "references": [{"source": "cve@mitre.org", "url": "http://secunia.com/advisories/19740"}, {"source": "cve@mitre.org", "url": "http://securitytracker.com/id?1015964"}, {"source": "cve@mitre.org", "url": "http://www.cisco.com/warp/public/707/cisco-sa-20060419-xr.shtml"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/24811"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/bid/17607"}, {"source": "cve@mitre.org", "url": "http://www.vupen.com/english/advisories/2006/1433"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25881"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://secunia.com/advisories/19740"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://securitytracker.com/id?1015964"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.cisco.com/warp/public/707/cisco-sa-20060419-xr.shtml"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.osvdb.org/24811"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/bid/17607"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.vupen.com/english/advisories/2006/1433"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25881"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}]}