PT-2001-2030 · Cisco · Cisco 12000+1

Published 2001-12-06 · Updated 2017-10-10 · CVE-2001-0864

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Cisco 12000 with IOS version 12.0

Description The issue arises from the improper handling of the implicit "deny ip any any" rule in an outgoing ACL when it contains exactly 448 entries. This can lead to some outgoing packets bypassing access restrictions.

Recommendations For Cisco 12000 with IOS version 12.0, consider reconfiguring the ACL to avoid having exactly 448 entries as a temporary workaround to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2001-0864

Affected Products

Cisco 12000

Ios

References · 6

• http://cisco.com/warp/public/707/GSR-ACL-pub.shtml · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2001-0864 · Security Note
• http://ciac.org/ciac/bulletins/m-018.shtml · Note
• http://securityfocus.com/bid/3536 · Note
• http://osvdb.org/1986 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/7553 · Note