PT-2001-2031 · Cisco · Cisco 12000+1

Published 2001-12-06 · Updated 2017-10-10 · CVE-2001-0865

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Cisco 12000 with IOS version 12.0

Description The issue concerns the Cisco 12000 device with IOS 12.0, specifically line cards based on Engine 2, which does not support the "fragment" keyword in an outgoing Access Control List (ACL). This lack of support could allow fragmented packets to bypass the intended access restrictions.

Recommendations For Cisco 12000 with IOS version 12.0, consider configuring ACLs to explicitly handle fragmented packets or seek alternative methods to enforce access control, as the device does not support the "fragment" keyword in outgoing ACLs.

Fix

Related Identifiers

CVE-2001-0865

Affected Products

Cisco 12000

Ios

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2001-0865 · Security Note
• http://cisco.com/warp/public/707/GSR-ACL-pub.shtml · Vendor Advisory
• http://ciac.org/ciac/bulletins/m-018.shtml · Note
• http://osvdb.org/1988 · Note
• http://securityfocus.com/bid/3540 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/7552 · Note