CVE-2011-2059

The ipv6 component in Cisco IOS before 15.1(4)M1.3 allows remote attackers to conduct fingerprinting attacks and obtain potentially sensitive information about the presence of the IOS operating system via an ICMPv6 Echo Request packet containing a Hop-by-Hop (HBH) extension header (EH) with a 0x0c01050c value in the PadN option data, aka Bug ID CSCtq02219.

CVSS v2.0 5.0 MEDIUM

5.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
http://blogs.cisco.com/security/1999tcp-redux-the-ipv6-flavor	Broken Link
http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=36606&signatureSubId=0	Vendor Advisory
http://blogs.cisco.com/security/1999tcp-redux-the-ipv6-flavor	Broken Link
http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=36606&signatureSubId=0	Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:o:cisco:ios:*:*:*:*:*:*:*:*

History

21 Nov 2024, 01:27

Type	Values Removed	Values Added
References	~~() http://blogs.cisco.com/security/1999tcp-redux-the-ipv6-flavor - Broken Link~~	() http://blogs.cisco.com/security/1999tcp-redux-the-ipv6-flavor - Broken Link
References	~~() http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=36606&signatureSubId=0 - Vendor Advisory~~	() http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=36606&signatureSubId=0 - Vendor Advisory

Information

Published : 2011-10-22 02:59

Updated : 2024-11-21 01:27

NVD link : CVE-2011-2059

Mitre link : CVE-2011-2059

CVE.ORG link : CVE-2011-2059

JSON object : View

Products Affected

cisco

ios

CWE

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

{"id": "CVE-2011-2059", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2011-10-22T02:59:19.323", "references": [{"url": "http://blogs.cisco.com/security/1999tcp-redux-the-ipv6-flavor", "tags": ["Broken Link"], "source": "ykramarz@cisco.com"}, {"url": "http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=36606&signatureSubId=0", "tags": ["Vendor Advisory"], "source": "ykramarz@cisco.com"}, {"url": "http://blogs.cisco.com/security/1999tcp-redux-the-ipv6-flavor", "tags": ["Broken Link"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=36606&signatureSubId=0", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-200"}]}], "descriptions": [{"lang": "en", "value": "The ipv6 component in Cisco IOS before 15.1(4)M1.3 allows remote attackers to conduct fingerprinting attacks and obtain potentially sensitive information about the presence of the IOS operating system via an ICMPv6 Echo Request packet containing a Hop-by-Hop (HBH) extension header (EH) with a 0x0c01050c value in the PadN option data, aka Bug ID CSCtq02219."}, {"lang": "es", "value": "El componente IPv6 en Cisco IOS anterior a v15.1(4)M1.3 permite a atacantes remotos a realizar ataques para la obtenci\u00f3n de datos del servidor (fingerprinter) y obtener informaci\u00f3n potencialmente sensible acerca de la presencia del sistema operativo IOS a trav\u00e9s de un paquete de petici\u00f3n eco ICMPv6 que contenga una cabecera Hop-by-hop (HBH) cabecera de extensi\u00f3n (EH) con un valor 0x0c01050c en los datos de opci\u00f3n PadN, tambi\u00e9n conocido como Bug ID CSCtq02219."}], "lastModified": "2024-11-21T01:27:31.237", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:cisco:ios:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "22AA4B1A-1D54-4E84-9CE5-8F6CBD7C6E1B", "versionEndExcluding": "15.1\\(4\\)m1.3"}], "operator": "OR"}]}], "sourceIdentifier": "ykramarz@cisco.com"}