-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

===========================================================================
A  U  S  C  E  R  T                                           A  L  E  R  T

                       AL-2008.0033 -- AUSCERT ALERT
                                  [Cisco]
                   Multiple vulnerabilities in Cisco IOS
                               27 March 2008

===========================================================================

        AusCERT Alert Summary
        ---------------------

Product:              Cisco IOS
Operating System:     Cisco
Impact:               Denial of Service
                      Inappropriate Access
                      Read-only Data Access
Access:               Remote/Unauthenticated
CVE Names:            CVE-2008-1156 CVE-2008-1153 CVE-2008-1152
                      CVE-2008-1151 CVE-2008-1150 CVE-2008-0057
Member content until: Thursday, April 24 2008

Ref:                  ESB-2008.0312
                      ESB-2008.0313
                      ESB-2008.0314
                      ESB-2008.0315
                      ESB-2008.0316

Original Bulletin:    
  http://www.cisco.com/warp/public/707/cisco-sa-20080326-mvpn.shtml
  http://www.cisco.com/warp/public/707/cisco-sa-20080326-IPv4IPv6.shtml
  http://www.cisco.com/warp/public/707/cisco-sa-20080326-dlsw.shtml
  http://www.cisco.com/warp/public/707/cisco-sa-20080326-pptp.shtml
  http://www.cisco.com/warp/public/707/cisco-sa-20080326-queue.shtml

OVERVIEW:

       Cisco has released five advisories affecting the Cisco IOS.


IMPACT:

       Successful exploitation of these vulnerabilities can result in a
       Denial of Service, inappropriate access or read-only data access.


MITIGATION:

       Please follow the instructions in each of the below bulletins to
       determine if your configuration is vulnerable and to find the
       patch relevant to your IOS version.


REFERENCES:

       ESB-2008.0312: Cisco IOS Multicast Virtual Private Network (MVPN) 
                      Data Leak
       ESB-2008.0313: Cisco IOS User Datagram Protocol Delivery Issue For 
                      IPv4/IPv6 Dual-stack Routers
       ESB-2008.0314: Multiple DLSw Denial of Service Vulnerabilities in 
                      Cisco IOS
       ESB-2008.0315: Vulnerability in Cisco IOS with OSPF, MPLS VPN, and 
                      Supervisor 32, Supervisor 720, or Route Switch 
                      Processor 720
       ESB-2008.0316: Cisco IOS Virtual Private Dial-up Network Denial of 
                      Service Vulnerability

AusCERT has made every effort to ensure that the information contained
in this document is accurate.  However, the decision to use the information
described is the responsibility of each user or organisation. The decision to
follow or act on information or advice contained in this security bulletin is
the responsibility of each user or organisation, and should be considered in
accordance with your organisation's site policies and procedures. AusCERT
takes no responsibility for consequences which may arise from following or
acting on information or advice contained in this security bulletin.

If you believe that your computer system has been compromised or attacked in 
any way, we encourage you to let us know by completing the secure National IT 
Incident Reporting Form at:

        http://www.auscert.org.au/render.html?it=3192

===========================================================================
Australian Computer Emergency Response Team
The University of Queensland
Brisbane
Qld 4072

Internet Email: auscert@auscert.org.au
Facsimile:      (07) 3365 7031
Telephone:      (07) 3365 4417 (International: +61 7 3365 4417)
                AusCERT personnel answer during Queensland business hours
                which are GMT+10:00 (AEST).
                On call after hours for member emergencies only.
===========================================================================

-----BEGIN PGP SIGNATURE-----
Comment: http://www.auscert.org.au/render.html?it=1967

iQCVAwUBR+rtpCh9+71yA2DNAQIg8AP/fCgJH15LQvsYN6F3r5GqENYfH/6R/VEb
4kWukw1h5T3QTkzZMNq56UtINqfCp0LgFlItif1ruSbIUIOJ0mTgNohE6D6fzYms
r2MlIfn3i1DQmtnb7jFJELuPr0aZHdjBfWSLPWvZUwvqYNamIBDQU4rCXHG+cW0T
7zxzcTGczpQ=
=hICb
-----END PGP SIGNATURE-----