Various Cisco products contain a flaw that may allow a remote denial of service. The issue is triggered when the devices receive a DNS packet containing crafted compressed data that causes errors in decompression, and will result in loss of availability for the service or device.

Upgrade to the product versions listed in the Cicso advisory or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

• Security Tracker: 1014043 1014044 1014045 1014046 1015975
• Bugtraq ID: 13729
• Secunia Advisory ID: 15472
• Related OSVDB ID: 19003 19005
• CVE ID: 2005-0037 (see also: NVD)
• ISS X-Force ID: 20712
• Mail List Post: http://attrition.org/pipermail/vim/2006-April/000735.html
• Vendor Specific Advisory URL: http://www.cisco.com/warp/public/707/cisco-sn-20050524-dns.shtml
• Other Advisory URL: http://www.niscc.gov.uk/niscc/docs/al-20050524-00433.html
  http://www.securiteam.com/securitynews/5XP0S1PFPY.html

• Dr. Steve Beaty - beatysmscd.edu - Metropolitan State College of Denver