Cisco vulnerability on smaller catalyst switches

Sat Jul 19 00:07:58 UTC 2003

> As part of our vulnerability tests, we have been unable to confirm
that
> the smaller catalyst switches running IOS but without L3 capability
are
> vulnerable.  They don't seem to react in a negative way to the same
> attacks that lock up the other devices we have tested.  Has anyone
else 
> been able to verify this one way or the other?

I tested Catalyst 2924-XL-EN with 12.0(5)WC5a and I found that without
L3 capability it does not seem to be affected.  But with L3
connectivity, if you direct the attack at the VLAN1 interface it is
definitely susceptible. 

I've tested 12.0(5)WC8 and it has the fix.

--steve