PT-2011-3936 · Cisco · Cisco Nx-Os

Published 2011-09-14 · Updated 2022-04-05 · CVE-2011-2581

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Cisco NX-OS versions 5.0(2) through 5.0(3) before 5.0(3)N2(1) on Nexus 5000 series switches Cisco NX-OS versions prior to 5.0(3)U1(2a) on Nexus 3000 series switches

Description The issue arises from the ACL implementation not properly handling comments in conjunction with deny statements. This allows remote attackers to bypass intended access restrictions by sending packets in certain circumstances.

Recommendations For Cisco NX-OS versions 5.0(2) through 5.0(3) before 5.0(3)N2(1) on Nexus 5000 series switches, update to version 5.0(3)N2(1) or later. For Cisco NX-OS versions prior to 5.0(3)U1(2a) on Nexus 3000 series switches, update to version 5.0(3)U1(2a) or later.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2011-2581

Affected Products

Cisco Nx-Os

References · 4

• http://cisco.com/en/US/products/products_security_advisory09186a0080b9250c.shtml · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2011-2581 · Security Note
• http://secunia.com/advisories/45883 · Note
• http://securitytracker.com/id?1026019 · Note