PT-2001-1656 · Cisco · Cisco Cbos

Publicado 2001-07-02 · Atualizado 2017-10-10 · CVE-2001-0444

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Cisco CBOS version 2.3.0.053

Description The issue allows sensitive information to be disclosed to unauthorized users. When the sh nat command, also known as show nat, is executed, its output is sent to the terminal of the next user who attempts to connect to the router via telnet. This could enable that user to obtain sensitive information.

Recommendations For Cisco CBOS version 2.3.0.053, consider restricting access to the sh nat command to minimize the risk of sensitive information disclosure until a fix is available. As a temporary workaround, restrict telnet connections to trusted users only.

Exploit

Correção

Identificadores relacionados

CVE-2001-0444

Produtos afetados

Cisco Cbos

Referências · 5

• 🔥 http://securityfocus.com/bid/2635 · Exploit
• 🔥 http://archives.neohapsis.com/archives/bugtraq/2001-04/0380.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2001-0444 · Nota de Segurança
• http://osvdb.org/1796 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6453 · Nota