PT-1995-1008 · Cisco · Cisco Ios

Published 1995-07-31 · Updated 2008-09-09 · CVE-1999-0161

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Cisco IOS version 10.3

Description The issue allows an extended IP access control list to bypass filtering when the tacacs-ds or tacacs keyword is used.

Recommendations For Cisco IOS version 10.3, consider disabling the use of the tacacs-ds or tacacs keyword in extended IP access control lists until a fix is available.

Fix

Related Identifiers

CVE-1999-0161

Affected Products

Cisco Ios

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-1999-0161 · Security Note
• http://osvdb.org/797 · Note