Overview
Cayman gateways vulnerable to a denial of service via oversized ICMP echo (ping) requests. Installing the newest version of the vendor software will resolve this vulnerability.
Description
Cayman gateways running versions 5.5 Build R0, 5.3 Build R2, 5.3 Build R1 are vulnerable to an oversized ICMP echo (ping) request. By sending an oversized ping packet to the gateway, it is possible to crash various services resulting in a denial of service. |
Impact
Exploiting this vulnerability results in a denial of service. |
Solution
Upgrade to the latest vendor software release. |
Vendor Information
104823
CVSS Metrics
| Group | Score | Vector |
|---|---|---|
| Base | ||
| Temporal | ||
| Environmental |
References
Acknowledgements
This vulnerability was discovered by Cassius.
This document was written by Jason Rafail.
Other Information
| CVE IDs: | CVE-2000-0418 |
| Severity Metric: | 1.41 |
| Date Public: | 2000-05-23 |
| Date First Published: | 2001-08-27 |
| Date Last Updated: | 2001-08-27 14:51 UTC |
| Document Revision: | 12 |