| Vulnerability Name: | CVE-2001-0929 (CCN-7614) | ||||||||
| Assigned: | 2001-11-28 | ||||||||
| Published: | 2001-11-28 | ||||||||
| Updated: | 2017-10-10 | ||||||||
| Summary: | Cisco IOS Firewall Feature set, aka Context Based Access Control (CBAC) or Cisco Secure Integrated Software, for IOS 11.2P through 12.2T does not properly check the IP protocol type, which could allow remote attackers to bypass access control lists. | ||||||||
| CVSS v3 Severity: | 7.3 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
| ||||||||
| CVSS v2 Severity: | 7.5 High (CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P)
| ||||||||
| Vulnerability Type: | CWE-Other | ||||||||
| Vulnerability Consequences: | Bypass Security | ||||||||
| References: | Source: MITRE Type: CNA CVE-2001-0929 Source: CCN Type: Cisco Security Notice 2004 March 27 19:30 UTC Exploit for Multiple Cisco Vulnerabilities Source: CCN Type: Cisco Systems Inc. Security Advisory, 2001 November 28 08:00 (UTC -0800) A Vulnerability in IOS Firewall Feature Set Source: CISCO Type: Patch, Vendor Advisory 20011128 A Vulnerability in IOS Firewall Feature Set Source: CCN Type: US-CERT VU#362483 Cisco IOS Firewall Feature Set fails to check IP protocol type thereby allowing packets to bypass dynamic access control lists Source: CERT-VN Type: US Government Resource VU#362483 Source: OSVDB Type: UNKNOWN 808 Source: CCN Type: OSVDB ID: 808 Cisco IOS Firewall CBAC ACL Bypass Source: CCN Type: SecuriTeam Mailing List, Security Holes & Exploits 25 Mar 2004 Multiple Cisco Exploit Codes Source: BID Type: UNKNOWN 3588 Source: CCN Type: BID-3588 Cisco Context Based Access Control Protocol Check Bypassing Vulnerability Source: XF Type: UNKNOWN ios-cbac-bypass-acl(7614) Source: XF Type: UNKNOWN ios-cbac-bypass-acl(7614) | ||||||||
| Vulnerable Configuration: | Configuration 1: Configuration CCN 1:  Denotes that component is vulnerable | ||||||||
| Oval Definitions | |||||||||
| |||||||||
| BACK | |||||||||