PT-2011-3936 · Cisco · Cisco Nx-Os

Publicado 2011-09-14 · Atualizado 2022-04-05 · CVE-2011-2581

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Cisco NX-OS versions 5.0(2) through 5.0(3) before 5.0(3)N2(1) on Nexus 5000 series switches Cisco NX-OS versions prior to 5.0(3)U1(2a) on Nexus 3000 series switches

Description The issue arises from the ACL implementation not properly handling comments in conjunction with deny statements. This allows remote attackers to bypass intended access restrictions by sending packets in certain circumstances.

Recommendations For Cisco NX-OS versions 5.0(2) through 5.0(3) before 5.0(3)N2(1) on Nexus 5000 series switches, update to version 5.0(3)N2(1) or later. For Cisco NX-OS versions prior to 5.0(3)U1(2a) on Nexus 3000 series switches, update to version 5.0(3)U1(2a) or later.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2011-2581

Produtos afetados

Cisco Nx-Os

Referências · 4

• http://cisco.com/en/US/products/products_security_advisory09186a0080b9250c.shtml · Aviso do Fabricante
• http://secunia.com/advisories/45883 · Nota
• http://securitytracker.com/id?1026019 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2011-2581 · Nota de Segurança