PT-2001-2032 · Cisco · Cisco 12000+1

Published 2001-12-06 · Updated 2008-09-05 · CVE-2001-0866

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Cisco 12000 with IOS version 12.0

Description The issue arises from improper handling of an outbound ACL when an input ACL is not configured on all interfaces of a multi-port line card, potentially allowing remote attackers to bypass intended access controls.

Recommendations For Cisco 12000 with IOS version 12.0, configure input ACLs on all interfaces of multi-port line cards to ensure proper access control.

Fix

Related Identifiers

CVE-2001-0866

Affected Products

Cisco 12000

Ios

References · 6

• http://cisco.com/warp/public/707/GSR-ACL-pub.shtml · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2001-0866 · Security Note
• http://iss.net/security_center/static/7554.php · Note
• http://ciac.org/ciac/bulletins/m-018.shtml · Note
• http://securityfocus.com/bid/3537 · Note
• http://osvdb.org/1984 · Note