PT-1992-1012 · Cisco · Cisco Routers

Publicado 1992-12-10 · Atualizado 2008-09-05 · CVE-1999-1466

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Cisco routers versions 8.2 through 9.1

Description The issue allows remote attackers to bypass access control lists under specific conditions, including the use of extended IP access lists on certain interfaces, the enablement of the IP route cache, and the use of the established keyword in the access list.

Recommendations For Cisco routers versions 8.2 through 9.1, consider disabling the IP route cache or avoiding the use of the established keyword in access lists as a temporary workaround until a patch is available. Restrict access to affected interfaces to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-1999-1466

Produtos afetados

Cisco Routers

Referências · 3

• http://cert.org/advisories/CA-1992-20.html · Correção
• http://securityfocus.com/bid/53 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-1999-1466 · Nota de Segurança