PT-2001-2029 · Cisco · Cisco 12000+1

Publicado 2001-12-06 · Atualizado 2017-10-10 · CVE-2001-0863

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Cisco 12000 with IOS version 12.0

Description The issue concerns the handling of the "fragment" keyword in a compiled ACL (Turbo ACL) for packets sent to the router. This can be exploited by remote attackers to cause a denial of service via a flood of fragments.

Recommendations For Cisco 12000 with IOS version 12.0, consider restricting access to the Turbo ACL feature until a patch is available to prevent exploitation.

Correção

Identificadores relacionados

CVE-2001-0863

Produtos afetados

Cisco 12000

Ios

Referências · 6

• http://osvdb.org/1987 · Nota
• http://cisco.com/warp/public/707/GSR-ACL-pub.shtml · Aviso do Fabricante
• http://securityfocus.com/bid/3539 · Nota
• http://ciac.org/ciac/bulletins/m-018.shtml · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/7551 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2001-0863 · Nota de Segurança