PT-1992-1012 · Cisco · Cisco Routers

Published 1992-12-10 · Updated 2008-09-05 · CVE-1999-1466

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Cisco routers versions 8.2 through 9.1

Description The issue allows remote attackers to bypass access control lists under specific conditions, including the use of extended IP access lists on certain interfaces, the enablement of the IP route cache, and the use of the established keyword in the access list.

Recommendations For Cisco routers versions 8.2 through 9.1, consider disabling the IP route cache or avoiding the use of the established keyword in access lists as a temporary workaround until a patch is available. Restrict access to affected interfaces to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-1999-1466

Affected Products

Cisco Routers

References · 3

• http://cert.org/advisories/CA-1992-20.html · Patch
• http://securityfocus.com/bid/53 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-1999-1466 · Security Note