PT-2011-2287 · Cisco · Cisco Ios

Published 2011-01-28 · Updated 2017-08-17 · CVE-2011-0348

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.4(11)MD through 12.4(24)MD before 12.4(24)MD3 Cisco IOS versions 12.4(22)MDA before 12.4(22)MDA5 Cisco IOS versions 12.4(24)MDA before 12.4(24)MDA3

Description The issue allows remote attackers to bypass intended access restrictions and intended billing restrictions by sending HTTP traffic to a restricted destination after sending HTTP traffic to an unrestricted destination.

Recommendations For versions 12.4(11)MD through 12.4(24)MD before 12.4(24)MD3, update to version 12.4(24)MD3 or later. For versions 12.4(22)MDA before 12.4(22)MDA5, update to version 12.4(22)MDA5 or later. For versions 12.4(24)MDA before 12.4(24)MDA3, update to version 12.4(24)MDA3 or later.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2011-0348

Affected Products

Cisco Ios

References · 8

• http://cisco.com/en/US/products/products_security_advisory09186a0080b6791d.shtml · Vendor Advisory
• http://secunia.com/advisories/43052 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2011-0348 · Security Note
• http://vupen.com/english/advisories/2011/0229 · Note
• http://securitytracker.com/id?1024992 · Note
• http://securityfocus.com/bid/46022 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/64936 · Note
• http://osvdb.org/70720 · Note