CVE-2007-5651
Vulnerability from cvelistv5
Published
2007-10-23 21:00
Modified
2024-08-07 15:39
Severity ?
Summary
Unspecified vulnerability in the Extensible Authentication Protocol (EAP) implementation in Cisco IOS 12.3 and 12.4 on Cisco Access Points and 1310 Wireless Bridges (Wireless EAP devices), IOS 12.1 and 12.2 on Cisco switches (Wired EAP devices), and CatOS 6.x through 8.x on Cisco switches allows remote attackers to cause a denial of service (device reload) via a crafted EAP Response Identity packet.
References
cve@mitre.orghttp://secunia.com/advisories/27329
cve@mitre.orghttp://www.cisco.com/en/US/products/products_security_response09186a00808de8bb.html
cve@mitre.orghttp://www.securityfocus.com/bid/26139
cve@mitre.orghttp://www.securitytracker.com/id?1018842
cve@mitre.orghttp://www.vupen.com/english/advisories/2007/3566
cve@mitre.orghttps://exchange.xforce.ibmcloud.com/vulnerabilities/37300
cve@mitre.orghttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5288
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/27329
af854a3a-2127-422b-91ae-364da2661108http://www.cisco.com/en/US/products/products_security_response09186a00808de8bb.html
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/26139
af854a3a-2127-422b-91ae-364da2661108http://www.securitytracker.com/id?1018842
af854a3a-2127-422b-91ae-364da2661108http://www.vupen.com/english/advisories/2007/3566
af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/37300
af854a3a-2127-422b-91ae-364da2661108https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5288
Impacted products
Vendor Product Version
n/a n/a Version: n/a
Show details on NVD website

To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T15:39:13.580Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "27329",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/27329"
          },
          {
            "name": "1018842",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1018842"
          },
          {
            "name": "oval:org.mitre.oval:def:5288",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5288"
          },
          {
            "name": "26139",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/26139"
          },
          {
            "name": "cisco-eap-dos(37300)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/37300"
          },
          {
            "name": "ADV-2007-3566",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/3566"
          },
          {
            "name": "20071019 Extensible Authentication Protocol Vulnerability",
            "tags": [
              "vendor-advisory",
              "x_refsource_CISCO",
              "x_transferred"
            ],
            "url": "http://www.cisco.com/en/US/products/products_security_response09186a00808de8bb.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2007-10-19T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in the Extensible Authentication Protocol (EAP) implementation in Cisco IOS 12.3 and 12.4 on Cisco Access Points and 1310 Wireless Bridges (Wireless EAP devices), IOS 12.1 and 12.2 on Cisco switches (Wired EAP devices), and CatOS 6.x through 8.x on Cisco switches allows remote attackers to cause a denial of service (device reload) via a crafted EAP Response Identity packet."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-28T12:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "27329",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/27329"
        },
        {
          "name": "1018842",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1018842"
        },
        {
          "name": "oval:org.mitre.oval:def:5288",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5288"
        },
        {
          "name": "26139",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/26139"
        },
        {
          "name": "cisco-eap-dos(37300)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/37300"
        },
        {
          "name": "ADV-2007-3566",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2007/3566"
        },
        {
          "name": "20071019 Extensible Authentication Protocol Vulnerability",
          "tags": [
            "vendor-advisory",
            "x_refsource_CISCO"
          ],
          "url": "http://www.cisco.com/en/US/products/products_security_response09186a00808de8bb.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2007-5651",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in the Extensible Authentication Protocol (EAP) implementation in Cisco IOS 12.3 and 12.4 on Cisco Access Points and 1310 Wireless Bridges (Wireless EAP devices), IOS 12.1 and 12.2 on Cisco switches (Wired EAP devices), and CatOS 6.x through 8.x on Cisco switches allows remote attackers to cause a denial of service (device reload) via a crafted EAP Response Identity packet."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "27329",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/27329"
            },
            {
              "name": "1018842",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1018842"
            },
            {
              "name": "oval:org.mitre.oval:def:5288",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5288"
            },
            {
              "name": "26139",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/26139"
            },
            {
              "name": "cisco-eap-dos(37300)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/37300"
            },
            {
              "name": "ADV-2007-3566",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2007/3566"
            },
            {
              "name": "20071019 Extensible Authentication Protocol Vulnerability",
              "refsource": "CISCO",
              "url": "http://www.cisco.com/en/US/products/products_security_response09186a00808de8bb.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2007-5651",
    "datePublished": "2007-10-23T21:00:00",
    "dateReserved": "2007-10-23T00:00:00",
    "dateUpdated": "2024-08-07T15:39:13.580Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "nvd": "{\"cve\":{\"id\":\"CVE-2007-5651\",\"sourceIdentifier\":\"cve@mitre.org\",\"published\":\"2007-10-23T21:47:00.000\",\"lastModified\":\"2024-11-21T00:38:23.680\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Unspecified vulnerability in the Extensible Authentication Protocol (EAP) implementation in Cisco IOS 12.3 and 12.4 on Cisco Access Points and 1310 Wireless Bridges (Wireless EAP devices), IOS 12.1 and 12.2 on Cisco switches (Wired EAP devices), and CatOS 6.x through 8.x on Cisco switches allows remote attackers to cause a denial of service (device reload) via a crafted EAP Response Identity packet.\"},{\"lang\":\"es\",\"value\":\"Vulnerabilidad no especificada en la implementaci\u00f3n Extensible Authentication Protocol (EAP) en Cisco IOS 12.3 y 12.4 sobre Cisco Access Points y 1310 Wireless Bridges (Wireless EAP devices), IOS 12.1 y 12.2 sobre Cisco switches (Wired EAP dispositivos), y CatOS 6.x hasta la 8.x sobre Cisco switches permite a atacantes remotos provocar denegaci\u00f3n de servicio (recarga de dispositivo) a trav\u00e9s de un paquete EAP Response Identity manipulado.\"}],\"metrics\":{\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:M/Au:N/C:N/I:N/A:C\",\"baseScore\":7.1,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"MEDIUM\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"COMPLETE\"},\"baseSeverity\":\"HIGH\",\"exploitabilityScore\":8.6,\"impactScore\":6.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-noinfo\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:catos:6.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"06F049B3-FBE6-4951-896E-B8AE2D7BFBAB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:catos:6.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6D9D9464-757E-4723-A475-838DCB069FBB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:catos:6.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BBAB91B7-D94C-484C-8153-2345FB8991CA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:catos:6.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"64B40395-B525-4471-8FE1-FB1D7BBD99EF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:catos:7.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"904FC5E4-6BE0-4B15-8283-26F92922B78E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:catos:7.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BCBC242B-1D34-4CAB-A96D-7B30DD83678B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:catos:7.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CC67FF4D-ED26-44B7-8AB9-26F0BB2946BF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:catos:7.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4A7B5E1E-5698-4F69-AB53-C9F6339758C9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:catos:7.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A01B4160-AC81-4C2D-B34A-C46EC2C610E7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:catos:7.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D726FE1E-26C9-41F2-AF59-8F8248449DE1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:catos:8.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3CCED76E-89CA-46E3-A285-2FB907780A66\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:catos:8.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"75165FB6-B193-4DC9-A2FF-20F553111A1F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:catos:8.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"34A3A284-36A9-4E8C-815D-6E2FE4C158DF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:catos:8.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"840F1B27-22E4-47C3-A4D9-5E43D5153CAC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:catos:8.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5C58A9E7-C119-4DC5-94E4-1701077330EF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios:12.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1F2F9EC5-EDA2-4C99-BBF1-2F2C92AACE95\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios:12.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E4BC49F2-3DCB-45F0-9030-13F6415EE178\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios:12.3ja:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D73E5138-016A-48EC-A367-3D3285AAFED2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios:12.3jea:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C114F1A6-5DFE-408F-B83A-E8B9D4AF9791\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios:12.3jeb:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9CD5C082-9730-466D-A4A8-E4EEE5F3730D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios:12.3jec:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8CF419BD-8474-4F33-9CDD-587E341ABA8D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios:12.4ja:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4EB2B390-A39F-4082-BBCB-712BDD95886D\"}]}]}],\"references\":[{\"url\":\"http://secunia.com/advisories/27329\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.cisco.com/en/US/products/products_security_response09186a00808de8bb.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.securityfocus.com/bid/26139\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.securitytracker.com/id?1018842\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.vupen.com/english/advisories/2007/3566\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://exchange.xforce.ibmcloud.com/vulnerabilities/37300\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5288\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://secunia.com/advisories/27329\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.cisco.com/en/US/products/products_security_response09186a00808de8bb.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.securityfocus.com/bid/26139\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.securitytracker.com/id?1018842\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.vupen.com/english/advisories/2007/3566\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://exchange.xforce.ibmcloud.com/vulnerabilities/37300\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5288\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}"
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.