CVE:CVE-2000-0268
CNNVD:CNNVD-200004-051
Cisco Internet Operating System(IOS)是一款使用于CISCO路由器上的操作系统。
Cisco IOS软件的某些版本在处理Telnet传递的环境变量时存在问题，远程攻击者可能利用此漏洞导致设备拒绝服务。
当一个特定的Telnet参数("ENVIRON"变量)传送给Cisco IOS Telnet服务程序，将导致IOS自动重载。这种攻击可以重复持续进行，因而形成一种拒绝服务攻击。
<*链接：http://www.cisco.com/warp/public/707/iostelnetopt-pub.shtml
*>
solution:Upgrade cisco ios to a higher version than 11.3aa,12.0(2,12.0(2xc,12.0(2xd,12.0(2xf,12.0(2xg,12.0(3t2,12.0(4,12.0(4s,12.0(4t,12.0(5,12.0(6,12.0(7t,and avoid the version 11.3aa,12.0(2),12.0(2)xc,12.0(2)xd,12.0(2)xf,12.0(2)xg,12.0(3)t2,12.0(4),12.0(4)s,12.0(4)t,12.0(5),12.0(6),12.0(7)t; Upgrade cisco accesspath to a higher version than ls-3,ts-3,vs-3,and avoid the version ls-3,ts-3,vs-3; Upgrade cisco as5200 to a higher version than *; Upgrade cisco as5300 to a higher version than *; Upgrade cisco as5800 to a higher version than *; Upgrade cisco system_controller_3640 to a higher version than *; Upgrade cisco voice_gateway_as5800 to a higher version than *; Upgrade cisco 3660_router to a higher version than *; Upgrade cisco 7100_router to a higher version than *; Upgrade cisco 7200_router to a higher version than *; Upgrade cisco 7500_router to a higher version than *; Upgrade cisco ubr7200 to a higher version than *