PT-2001-2030 · Cisco · Cisco 12000+1

Publicado 2001-12-06 · Atualizado 2017-10-10 · CVE-2001-0864

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Cisco 12000 with IOS version 12.0

Description The issue arises from the improper handling of the implicit "deny ip any any" rule in an outgoing ACL when it contains exactly 448 entries. This can lead to some outgoing packets bypassing access restrictions.

Recommendations For Cisco 12000 with IOS version 12.0, consider reconfiguring the ACL to avoid having exactly 448 entries as a temporary workaround to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2001-0864

Produtos afetados

Cisco 12000

Ios

Referências · 6

• http://cisco.com/warp/public/707/GSR-ACL-pub.shtml · Aviso do Fabricante
• http://ciac.org/ciac/bulletins/m-018.shtml · Nota
• http://securityfocus.com/bid/3536 · Nota
• http://osvdb.org/1986 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2001-0864 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/7553 · Nota