Cisco IOS 12.2 through 12.4 and 15.0 does not recognize the vrf-also keyword during enforcement of access-class commands, which allows remote attackers to establish TELNET connections from arbitrary source IP addresses via a standard TELNET client, aka Bug ID CSCsi77774.
References
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 01:34
Type | Values Removed | Values Added |
---|---|---|
References | () http://www.cisco.com/en/US/docs/switches/lan/catalyst6500/ios/12.2SXF/native/release/notes/caveats_SXF_rebuilds.html - | |
References | () http://www.securitytracker.com/id?1027005 - |
Information
Published : 2012-05-02 10:09
Updated : 2024-11-21 01:34
NVD link : CVE-2012-0339
Mitre link : CVE-2012-0339
CVE.ORG link : CVE-2012-0339
JSON object : View
Products Affected
cisco
- ios
CWE
CWE-20
Improper Input Validation