Lucene search

[email protected]CVE-2001-0929

HistoryNov 28, 2001 - 5:00 a.m.

CVE-2001-0929

2001-11-2805:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2001-0929

cisco ios firewall

ip protocol

access control

cbac

bypass

6.9 Medium

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.005 Low

EPSS

Percentile

77.0%

JSON

Cisco IOS Firewall Feature set, aka Context Based Access Control (CBAC) or Cisco Secure Integrated Software, for IOS 11.2P through 12.2T does not properly check the IP protocol type, which could allow remote attackers to bypass access control lists.

CPENameOperatorVersion
cisco:ioscisco ioseq12.1e
cisco:ioscisco ioseq12.1t
cisco:ioscisco ioseq12.2t
cisco:ioscisco ioseq12.0t
cisco:ioscisco ioseq11.2p
cisco:ioscisco ioseq12.1
cisco:ioscisco ioseq11.3t
cisco:ioscisco ioseq12.2
cisco:ioscisco ioseq12.0

CPE	Name	Operator	Version
cisco:ios	cisco ios	eq	12.1e
cisco:ios	cisco ios	eq	12.1t
cisco:ios	cisco ios	eq	12.2t
cisco:ios	cisco ios	eq	12.0t
cisco:ios	cisco ios	eq	11.2p
cisco:ios	cisco ios	eq	12.1
cisco:ios	cisco ios	eq	11.3t
cisco:ios	cisco ios	eq	12.2
cisco:ios	cisco ios	eq	12.0

References

www.cisco.com/warp/public/707/IOS-cbac-dynacl-pub.shtml

www.kb.cert.org/vuls/id/362483

www.osvdb.org/808

www.securityfocus.com/bid/3588

exchange.xforce.ibmcloud.com/vulnerabilities/7614

6.9 Medium

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.005 Low

EPSS

Percentile

77.0%

JSON

Related for CVE-2001-0929

nessus2 cisco1