Lucene search
HistoryMar 09, 2002 - 5:00 a.m.
CVE-1999-1100
cisco
pix private link
des key
cve-1999-1100
nvd
configuration file
security vulnerability
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7 High
AI Score
Confidence
Low
0.007 Low
EPSS
Percentile
80.3%
Cisco PIX Private Link 4.1.6 and earlier does not properly process certain commands in the configuration file, which reduces the effective key length of the DES key to 48 bits instead of 56 bits, which makes it easier for an attacker to find the proper key via a brute force attack.
Affected configurations
Node
ciscopix_private_linkRange≤4.1\(6\)
| CPE | Name | Operator | Version |
|---|---|---|---|
| cisco:pix_private_link | cisco pix private link | le | 4.1\(6\) |
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7 High
AI Score
Confidence
Low
0.007 Low
EPSS
Percentile
80.3%
Related for CVE-1999-1100