PT-2001-1656 · Cisco · Cisco Cbos

Published 2001-07-02 · Updated 2017-10-10 · CVE-2001-0444

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Cisco CBOS version 2.3.0.053

Description The issue allows sensitive information to be disclosed to unauthorized users. When the sh nat command, also known as show nat, is executed, its output is sent to the terminal of the next user who attempts to connect to the router via telnet. This could enable that user to obtain sensitive information.

Recommendations For Cisco CBOS version 2.3.0.053, consider restricting access to the sh nat command to minimize the risk of sensitive information disclosure until a fix is available. As a temporary workaround, restrict telnet connections to trusted users only.

Exploit

Fix

Related Identifiers

CVE-2001-0444

Affected Products

Cisco Cbos

References · 5

• 🔥 http://securityfocus.com/bid/2635 · Exploit
• 🔥 http://archives.neohapsis.com/archives/bugtraq/2001-04/0380.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2001-0444 · Security Note
• http://osvdb.org/1796 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6453 · Note