34 matches found
CVE-2001-0864
Cisco 12000 Series routers with IOS 12.0 and Engine 2 line cards have an ACL boundary bug: when an outgoing ACL contains exactly 448 entries, the implicit/deny rule may be bypassed for some outbound packets. Affected component: outgoing ACL processing on Engine 2-based line cards; impact: potenti...
CVE-2001-0650
CVE-2001-0650 affects Cisco IOS 12.0 and earlier. A BGP UPDATE containing an unrecognized transitive attribute can cause memory corruption, leading to router crashes or bad route updates, potentially disrupting networks. Cisco’s advisory states this is caused by BGP attribute processing in config...
CVE-2001-0866
Cisco 12000 with IOS 12.0 and lines card based on Engine 2 does not properly handle an outbound ACL when an input ACL is not configured on all the interfaces of a multi port line card, which could allow remote attackers to bypass the intended access controls...
CVE-2001-0864
Cisco 12000 with IOS 12.0 and line cards based on Engine 2 does not properly handle the implicit "deny ip any any" rule in an outgoing ACL when the ACL contains exactly 448 entries, which can allow some outgoing packets to bypass access restrictions...
CVE-2001-0862
Cisco 12000 with IOS 12.0 and line cards based on Engine 2 does not block non-initial packet fragments, which allows remote attackers to bypass the ACL...
CVE-2001-0861
Cisco 12000 with IOS 12.0 and line cards based on Engine 2 and earlier allows remote attackers to cause a denial of service CPU consumption by flooding the router with traffic that generates a large number of ICMP Unreachable replies...
CVE-2001-0865
Cisco 12000 with IOS 12.0 and line cards based on Engine 2 does not support the "fragment" keyword in an outgoing ACL, which could allow fragmented packets in violation of the intended access...
CVE-2001-0863
Cisco 12000 Series routers running IOS 12.0 with Engine 2 line cards are vulnerable in Turbo ACL handling; the compiled ACL may ignore the fragment keyword for packets to the router, enabling remote denial of service via a flood of fragments. Affected component: fragmented traffic in ACLs. Impact...
CVE-2001-0861
The CVE-2001-0861 issue affects Cisco 12000 Series routers running IOS 12.0 with Engine 2 (and earlier) line cards, where a remote attacker can cause a denial of service by flooding the device with traffic that generates a large number of ICMP Unreachable replies, degrading throughput due to CPU ...
CVE-2001-0865
Cisco 12000 with IOS 12.0 and line cards based on Engine 2 does not support the "fragment" keyword in an outgoing ACL, which could allow fragmented packets in violation of the intended access...
CVE-2001-0711
CVE-2001-0711 affects Cisco IOS 11.x and 12.0 with ATM support. The flaw allows an attacker to cause a denial of service via the undocumented ILMI SNMP community string. The issue is present in combinations of IOS releases that include ATM/ILMI support. Cisco documents a fix through free software...
CVE-1999-0445
In Cisco routers under some versions of IOS 12.0 running NAT, some packets may not be filtered by input access list filters...
CVE-1999-0445
Cisco IOS releases running NAT on some 12.0-based versions may leak packets through input access-lists, due to a group of bugs in NAT-ACL interaction. Affected code paths involve NAT processing with input ACL filtering, potentially causing filters to appear to work while packets bypass them. Cisc...