Description
Extended Interior Gateway Routing Protocol (EIGRP), as implemented in Cisco IOS 11.3 through 12.2 and other products, allows remote attackers to cause a denial of service (flood) by sending a large number of spoofed EIGRP neighbor announcements, which results in an ARP storm on the local network.
References
- 18055 vdb-entry
- 20021219 Re: Cisco IOS EIGRP Network DoS mailing-list
- 6443 vdb-entry
- 20021220 Cisco's Response to the EIGRP Issue vendor-advisory
- 7766 third-party-advisory
- 1005840 vdb-entry
- 20021219 Cisco IOS EIGRP Network DoS mailing-list
- http://www.cisco.com/warp/public/707/eigrp_issue.pdf
- 20051220 Re: Unauthenticated EIGRP DoS mailing-list
- 20051219 Unauthenticated EIGRP DoS mailing-list
- 20051220 RE: Authenticated EIGRP DoS / Information leak mailing-list
- cisco-ios-eigrp-dos(10903) vdb-entry