A vulnerability was identified in Cisco Internet Operating System (IOS), which could be exploited by remote attackers to execute arbitrary commands. This flaw is due to a heap overflow error when processing specially crafted packets, which could be exploited by an unauthenticated attacker to execute arbitrary code and compromise a vulnerable device.

Note : The vendor has stated that the research presented by Michael Lynn was not a disclosure of a new vulnerability or a flaw with Cisco IOS software, but an exploration of ways to expand exploitations of existing security vulnerabilities impacting routers.

FrSIRT Advisory : FrSIRT/ADV-2005-1248
CVE Reference : GENERIC-MAP-NOMATCH
Rated as : Critical
Remotely Exploitable : Yes
Locally Exploitable : Yes
Release Date : 2005-07-27

* Technical Description *

A vulnerability was identified in Cisco Internet Operating System (IOS), which could be exploited by remote attackers to execute arbitrary commands. This flaw is due to a heap overflow error when processing specially crafted packets, which could be exploited by an unauthenticated attacker to execute arbitrary code and compromise a vulnerable device.

Nice to see the industry recognizing the seriousness of it all.