Description
The mDNS implementation in Cisco IOS XE 3.12S does not properly interact with autonomic networking, which allows remote attackers to obtain sensitive networking-services information by sniffing the network or overwrite networking-services data via a crafted mDNS response, aka Bug ID CSCun64867.
References
- 1030444 vdb-entry
- 58715 third-party-advisory
- 68021 vdb-entry
- 20140612 Cisco Autonomic Networking Infrastructure Overwrite Vulnerability vendor-advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=34613