CVE:CVE-2009-2868
CNNVD:CNNVD-200910-022
Cisco IOS是美国思科（Cisco）公司为其网络设备开发的操作系统。
如果使用了基于证书的认证，则Cisco IOS软件的IKE实现中存在漏洞。成功利用这个漏洞可能导致分配所有可用的Phase 1 SA，无法创建新的IPSec会话。
solution:Upgrade cisco ios to a higher version than 12.2ex,12.2ira,12.2irb,12.2irc,12.2sb,12.2sca,12.2scb,12.2se,12.2sra,12.2srb,12.2src,12.2srd,12.2sxh,12.2sxi,12.2xna,12.2xnb,12.2xnc,12.2xnd,12.3t,12.3xl,12.3xr,12.3xs,12.3xx,12.3ya,12.3yd,12.3yf,12.3yg,12.3yh,12.3yi,12.3yq,12.3ys,12.3yt,12.3yu,12.3yx,12.3yz,12.4,12.4t,12.4xb,12.4xc,12.4xd,and avoid the version 12.2ex,12.2ira,12.2irb,12.2irc,12.2sb,12.2sca,12.2scb,12.2se,12.2sra,12.2srb,12.2src,12.2srd,12.2sxh,12.2sxi,12.2xna,12.2xnb,12.2xnc,12.2xnd,12.3t,12.3xl,12.3xr,12.3xs,12.3xx,12.3ya,12.3yd,12.3yf,12.3yg,12.3yh,12.3yi,12.3yq,12.3ys,12.3yt,12.3yu,12.3yx,12.3yz,12.4,12.4t,12.4xb,12.4xc,12.4xd