PT-2001-2033 · Cisco · Cisco 12000+1

Published 2001-12-06 · Updated 2017-10-10 · CVE-2001-0867

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Cisco 12000 with IOS version 12.0

Description The issue concerns improper filtering of packet fragments in Cisco 12000 with IOS, allowing remote attackers to bypass intended access controls even when the "fragment" keyword is used in an Access Control List (ACL).

Recommendations For Cisco 12000 with IOS version 12.0, consider reconfiguring the ACL to more effectively handle packet fragments as a temporary workaround until a patch is available.

Fix

Related Identifiers

CVE-2001-0867

Affected Products

Cisco 12000

Ios

References · 6

• http://cisco.com/warp/public/707/GSR-ACL-pub.shtml · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2001-0867 · Security Note
• http://osvdb.org/1989 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/7555 · Note
• http://ciac.org/ciac/bulletins/m-018.shtml · Note
• http://securityfocus.com/bid/3538 · Note