Mon premier blog

MPLS Configuration on Cisco IOS Software Lancy Lobo, Umesh Lakshman
Publisher:

Devices running Cisco IOS versions 12.0S, 12.2, 12.3 or 12.4 and configured for Multiprotocol Label Switching (MPLS) Virtual Private Networks (VPNs) or VPN Routing and Forwarding Lite (VRF Lite) and using Border Gateway Protocol (BGP) between Customer Edge (CE) and Provider Edge (PE) Cisco IOS Software Multi Protocol Label Switching (MPLS) Forwarding Infrastructure (MFI) is vulnerable to a Denial of Service (DoS) attack from specially crafted packets. You may be running "IP Base" set which doesn't support MPLS but Nessus will show MPLS vulnerability. MPLS Configuration on Cisco IOS Software book download. Download MPLS Configuration on Cisco IOS Software . XS before 3.7.2S, when MPLS-TE is enabled, allows remote attackers to cause a denial of service (incorrect memory access and device reload) via a traffic engineering PATH message in an RSVP packet, aka Bug ID CSCtg39957. It looks like they got this right from my MPLS bible (MPLS Configuration on Cisco IOS Software Page 17) “…(PHP)…This process is signaled by the downstream Edge LSR during Label distribution with LDP. Hyperlink:http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1143. Free Cisco Training & Resources -certification Exam Preparation. Tuesday, 26 March 2013 at 04:52. For example if there is a vulnerability in http server but your sets of the same IOS version. For example You may be running version of IOS that has known security vulnerabilities but your device may be not vulnerable. In the ever exploring world of networking, Its nice Catalyst 6500 Series Switch Cisco IOS Software Configuration Guide. MPLS Configuration on Cisco IOS Software: A complete configuration. Name: 20130327 Cisco IOS Software RSVP Denial of Service Vulnerability. So in order to determine if our device is vulnerable configuration are not be enabled upon reload.