PT-2001-2028 · Cisco · Cisco 12000+1

Published 2001-12-06 · Updated 2017-10-10 · CVE-2001-0862

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Cisco 12000 with IOS version 12.0

Description The issue allows remote attackers to bypass the Access Control List (ACL) by not blocking non-initial packet fragments.

Recommendations For Cisco 12000 with IOS version 12.0, consider configuring the device to block non-initial packet fragments to prevent ACL bypass.

Fix

Related Identifiers

CVE-2001-0862

Affected Products

Cisco 12000

Ios

References · 6

• http://cisco.com/warp/public/707/GSR-ACL-pub.shtml · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2001-0862 · Security Note
• http://securityfocus.com/bid/3535 · Note
• http://ciac.org/ciac/bulletins/m-018.shtml · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/7550 · Note
• http://osvdb.org/1985 · Note