PT-1992-1009 · Cisco · Cisco Ios

Publicado 1992-12-10 · Atualizado 2008-09-05 · CVE-1999-1306

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 9.1 and earlier

Description The issue is related to the improper handling of extended IP access lists when the IP route cache is enabled and the "established" keyword is set. This could potentially allow attackers to bypass filters.

Recommendations For Cisco IOS versions 9.1 and earlier, consider disabling the IP route cache or removing the "established" keyword from extended IP access lists as a temporary workaround until a patch is available.

Correção

Identificadores relacionados

CVE-1999-1306

Produtos afetados

Cisco Ios

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-1999-1306 · Nota de Segurança
• http://cert.org/advisories/CA-1992-20.html · Correção