CVE-2012-0339

Cisco IOS 12.2 through 12.4 and 15.0 does not recognize the vrf-also keyword during enforcement of access-class commands, which allows remote attackers to establish TELNET connections from arbitrary source IP addresses via a standard TELNET client, aka Bug ID CSCsi77774...

CVE-2012-0339

Cisco IOS 12.2–12.4 and 15.0 contain a flaw where the vrf-also keyword is not recognized during enforcement of access-class commands, enabling remote TELNET connections to originate from spoofed/any source IPs via a standard TELNET client. Root cause: improper handling of vrf-also in access-contr...