744 matches found
CVE-2001-0862
Cisco 12000 Series routers running IOS 12.0 with Engine 2 line cards are affected. The flaw permits non‑initial IP fragments to bypass ACLs, enabling a remote attacker to bypass firewall rules. The issue is tied to how fragment handling is treated in ACLs, leading to incomplete filtering. Affecte...
CVE-2001-0862
Cisco 12000 with IOS 12.0 and line cards based on Engine 2 does not block non-initial packet fragments, which allows remote attackers to bypass the ACL...
Allaire JRun ACL bypassing/soure disclosure vulnerability
In-Reply-To: 009a01c1792a$d8a23160$0205a8c0@athlon hi, just an add on for the Jrun indexing vulnerability, the same 3f.jsp trick allows to view server scripts sources by using : GET /scripts.asp3f.jsp HTTP/1.0 and can be used to bypass IIS directories ACLs too while indexing the content and/or...
CVE-2000-0700
Cisco Gigabit Switch Routers GSR with Fast Ethernet / Gigabit Ethernet cards, from IOS versions 11.215GS1A up to 11.219GS0.2 and some versions of 12.0, do not properly handle line card failures, which allows remote attackers to bypass ACLs or force the interface to stop forwarding packets...