CiscoIOSStackGroupBiddingProtocol(SGBP)机制不正确处理SGBP协议，远程攻击者可以利用
漏洞对设备进行拒绝
服务攻击。
漏洞信息
CiscoIOS是一款流行的网络操作系统。
CiscoIOSStackGro
upBiddingProtocol(SGBP)机制不正确处理SGBP协议，远程攻击者可以利用漏洞对设备进行拒绝服务攻击。
SGBP协议是多机架多链路点到点协议(MMP)实现，CiscoIOS的SGBP实现在处理畸形UDP包时存在问题，发送恶意UDP包当9900端口可导致设备挂起并停止响应。造成拒绝服务攻击。
用户可根据如下的命令查看是否起用SGBP协议：
*系统支持但没有起用SGBP将返回如下信息：
Router#showsgbp
Router#
*系统不支持SGBP将返回如下错误消息：
Router#showsgbp
Router#showsgbp
%Invalidinputdetectedat'^'marker.
厂商解决方案
可参考供应商的如下链接获得补丁信息：
漏洞提供者
Cisco
漏洞消息链接
漏洞消息标题
CiscoSecurityAdvisory:IOSStackGroupBiddingProtocolCraftedPacketDoS
BUGTRAQID:16303
CNCANID:CNCAN-2006011903
漏洞消息时间:2006-01-18
漏洞起因
异常条件处理失败错误
影响系统
CiscoIOS12.4XB
CiscoIOS12.4XA
CiscoIOS12.4T
CiscoIOS12.4MR
CiscoIOS12.4
CiscoIOS12.3YX
CiscoIOS12.3YU
CiscoIOS12.3YT
CiscoIOS12.3YQ
CiscoIOS12.3YM
CiscoIOS12.3YK
CiscoIOS12.3YJ
CiscoIOS12.3YG
CiscoIOS12.3YF
CiscoIOS12.3XW
CiscoIOS12.3XU
CiscoIOS12.3XQ
CiscoIOS12.3XM
CiscoIOS12.3XJ
CiscoIOS12.3XI
CiscoIOS12.3XH
CiscoIOS12.3XF
CiscoIOS12.3XD
CiscoIOS12.3XB
CiscoIOS12.3T
CiscoIOS12.3BW
CiscoIOS12.3BC
CiscoIOS12.3B
CiscoIOS12.3
CiscoIOS12.2ZN
CiscoIOS12.2ZJ
CiscoIOS12.2ZE
CiscoIOS12.2ZD
CiscoIOS12.2ZB
CiscoIOS12.2ZA
CiscoIOS12.2YZ
CiscoIOS12.2YY
CiscoIOS12.2YX
CiscoIOS12.2YW
CiscoIOS12.2YT
CiscoIOS12.2YN
CiscoIOS12.2YE
CiscoIOS12.2YD
CiscoIOS12.2XV
CiscoIOS12.2XT
CiscoIOS12.2XS
CiscoIOS12.2XL
CiscoIOS12.2XK
CiscoIOS12.2XG
CiscoIOS12.2XF
CiscoIOS12.2XC
CiscoIOS12.2XB
CiscoIOS12.2XA
CiscoIOS12.2T
CiscoIOS12.2SZ
CiscoIOS12.2SY
CiscoIOS12.2SU
CiscoIOS12.2S
CiscoIOS12.2MC
CiscoIOS12.2DX
CiscoIOS12.2DD
CiscoIOS12.2CX
CiscoIOS12.2BY
CiscoIOS12.2BW
CiscoIOS12.2BC
CiscoIOS12.2B
CiscoIOS12.2
CiscoIOS12.1YD
CiscoIOS12.1YB
CiscoIOS12.1YA
CiscoIOS12.1XZ
CiscoIOS12.1XY
CiscoIOS12.1XX
CiscoIOS12.1XW
CiscoIOS12.1XU
CiscoIOS12.1XS
CiscoIOS12.1XQ
CiscoIOS12.1XM
CiscoIOS12.1XL
CiscoIOS12.1XI
CiscoIOS12.1XH
CiscoIOS12.1XD
CiscoIOS12.1XA
CiscoIOS12.1T
CiscoIOS12.1GB
CiscoIOS12.1GA
CiscoIOS12.1EZ
CiscoIOS12.1EX
CiscoIOS12.1EC
CiscoIOS12.1E
CiscoIOS12.1AA
CiscoIOS12.1
CiscoIOS12.0XR
CiscoIOS12.0XN
CiscoIOS12.0XL
CiscoIOS12.0XK
CiscoIOS12.0XJ
CiscoIOS12.0XI
CiscoIOS12.0XH
CiscoIOS12.0XG
CiscoIOS12.0XE
CiscoIOS12.0XD
CiscoIOS12.0XC
CiscoIOS12.0XA
CiscoIOS12.0T
CiscoIOS12.0SC
CiscoIOS12.0S
CiscoIOS12.0
危害
远程攻击者可以利用漏洞对设备进行拒绝服务攻击。
攻击所需条件
攻击者必须访问CiscoIOS。
当前位置：
