PT-2011-2287 · Cisco · Cisco Ios

Publicado 2011-01-28 · Atualizado 2017-08-17 · CVE-2011-0348

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.4(11)MD through 12.4(24)MD before 12.4(24)MD3 Cisco IOS versions 12.4(22)MDA before 12.4(22)MDA5 Cisco IOS versions 12.4(24)MDA before 12.4(24)MDA3

Description The issue allows remote attackers to bypass intended access restrictions and intended billing restrictions by sending HTTP traffic to a restricted destination after sending HTTP traffic to an unrestricted destination.

Recommendations For versions 12.4(11)MD through 12.4(24)MD before 12.4(24)MD3, update to version 12.4(24)MD3 or later. For versions 12.4(22)MDA before 12.4(22)MDA5, update to version 12.4(22)MDA5 or later. For versions 12.4(24)MDA before 12.4(24)MDA3, update to version 12.4(24)MDA3 or later.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2011-0348

Produtos afetados

Cisco Ios

Referências · 8

• http://cisco.com/en/US/products/products_security_advisory09186a0080b6791d.shtml · Aviso do Fabricante
• http://vupen.com/english/advisories/2011/0229 · Nota
• http://securitytracker.com/id?1024992 · Nota
• http://securityfocus.com/bid/46022 · Nota
• http://secunia.com/advisories/43052 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/64936 · Nota
• http://osvdb.org/70720 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2011-0348 · Nota de Segurança