PT-2011-2770 · Cisco · Cisco Ios

Publicado 2011-04-14 · Atualizado 2011-04-21 · CVE-2011-0935

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 15.0 through 15.1

Description The issue concerns the PKI functionality, which fails to prevent permanent caching of certain public keys. This allows remote attackers to bypass authentication and potentially have other impacts by leveraging an IKE peer relationship where a key was previously valid but later revoked.

Recommendations For Cisco IOS versions 15.0 through 15.1, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-310

Identificadores relacionados

CVE-2011-0935

Produtos afetados

Cisco Ios

Referências · 4

• http://cisco.com/en/US/docs/ios/15_1/release/notes/151-2TCAVS.html · Nota
• http://cisco.com/en/US/docs/ios/15_1s/release/notes/15_1s_caveats_15_1_1s.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2011-0935 · Nota de Segurança
• http://securityfocus.com/bid/47407 · Nota