Datasheet
230
Release Notes for Cisco IOS Release 12.1E on the Catalyst 6500 and Cisco 7600 Supervisor Engine and MSFC
OL-2310-11
Caveats
sessions which are terminating on a device (such as a router, switch, or computer) and not to the
sessions that are only passing through the device (for example, transit traffic that is being routed by
a router). In addition, this attack vector does not directly compromise data integrity or
confidentiality.
All Cisco products which contain TCP stack are susceptible to this vulnerability.
This advisory is available at
http://www.cisco.com/warp/public/707/cisco-sa-20040420-tcp-ios.shtml, and it describes this
vulnerability as it applies to Cisco products that run Cisco IOS® software.
A companion advisory that describes this vulnerability for products that do not run Cisco IOS
software is available at
http://www.cisco.com/warp/public/707/cisco-sa-20040420-tcp-nonios.shtml.
This problem is resolved in Release 12.1(13)E14. (CSCed93836, CSCdz84583)
• With a loopback cable from a trunk port connected to a WAN port acting as an MPLS/VPN interface,
an unresolved default route causes the PFC to send packets to the MSFC for ARP resolution, which
interferes with hardware switching of the packets exiting the loopback port. This problem is
resolved in Release 12.1(13)E14. (CSCed64844)
• A reload might occur after you shut down a Gigabit Ethernet interface. This problem is resolved in
Release 12.1(13)E14. (CSCed58452)
• TCP FIN and RST packets might be dropped, which causes a 3 to 4 second delay in retrieving web
content, if a hardware-switched TCP connection carrying more than 1,000 packets per second is load
balanced through IOS Firewall Load Balancing or Cisco IOS server load balancing. This problem is
resolved in Release 12.1(13)E14. (CSCed38956)
• With a PFC2 and with EtherChannels configured to include interfaces on different DFC-equipped
switching modules, ARP traffic from a WS-X6066-SLB-APC Content Switching Module (CSM)
that is running software version 3.2(2) and earlier might not be forwarded correctly. This problem
is resolved in Release 12.1(13)E14. (CSCed35745)
• These switching modules might reset when a link contiguously goes from down to up to down within
300 milliseconds.
–
WS-6248-RJ45
–
WS-6248-TEL
–
WS-6348-RJ45
–
WS-6348-RJ21
–
WS-6148-RJ45
–
WS-6148-RJ21
–
WS-6348-100FX
This problem is resolved in Release 12.1(13)E14. (CSCed17719)
• In rare situations, the MTU size on a WS-X6548-RJ-45 switching module might not be programmed
correctly in hardware. This problem is resolved in Release 12.1(13)E14. (CSCed90989,
CSCed10458)
• It is possible for an invalid override-mac-address command to be accepted at boot time if you use
a configuration file from one system on another. This problem is resolved in Release 12.1(13)E14.
(CSCeb83558)
• The show power command might incorrectly display a standby Supervisor Engine 2 as a Supervisor
Engine 1. This problem is resolved in Release 12.1(13)E14. (CSCdy56620)