PT-1999-1602 · Cisco · Cisco Cache Engine+1

Publicado 1999-12-31 · Atualizado 2017-10-10 · CVE-1999-1175

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Cisco Cache Engine for Cisco IOS versions prior to 11.2

Description The issue concerns the Web Cache Control Protocol (WCCP) in Cisco Cache Engine for Cisco IOS, which does not utilize authentication. This lack of authentication allows remote attackers to redirect HTTP traffic to arbitrary hosts by sending WCCP packets to UDP port 2048.

Recommendations For Cisco Cache Engine for Cisco IOS versions prior to 11.2, consider implementing authentication for WCCP to prevent unauthorized redirection of HTTP traffic. As a temporary workaround, restrict access to UDP port 2048 to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-1999-1175

Produtos afetados

Cisco Cache Engine

Cisco Ios

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-1999-1175 · Nota de Segurança
• http://cisco.com/warp/public/770/wccpauth-pub.shtml · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/1577 · Nota
• http://ciac.org/ciac/bulletins/i-054.shtml · Aviso do Fabricante