PT-2001-2033 · Cisco · Cisco 12000+1

Publicado 2001-12-06 · Atualizado 2017-10-10 · CVE-2001-0867

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Cisco 12000 with IOS version 12.0

Description The issue concerns improper filtering of packet fragments in Cisco 12000 with IOS, allowing remote attackers to bypass intended access controls even when the "fragment" keyword is used in an Access Control List (ACL).

Recommendations For Cisco 12000 with IOS version 12.0, consider reconfiguring the ACL to more effectively handle packet fragments as a temporary workaround until a patch is available.

Correção

Identificadores relacionados

CVE-2001-0867

Produtos afetados

Cisco 12000

Ios

Referências · 6

• http://cisco.com/warp/public/707/GSR-ACL-pub.shtml · Aviso do Fabricante
• http://osvdb.org/1989 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/7555 · Nota
• http://ciac.org/ciac/bulletins/m-018.shtml · Nota
• http://securityfocus.com/bid/3538 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2001-0867 · Nota de Segurança