CVEvulnerability
CVE-1999-1306
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 1992-12-10
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
Cisco IOS 9.1 and earlier does not properly handle extended IP access lists when the IP route cache is enabled and the "established" keyword is set, which could allow attackers to bypass filters.
Affected configurations
• cisco ios (<= 9.1)
References
- http://www.cert.org/advisories/CA-1992-20.html Patch, Third Party Advisory, US Government Resource
- http://www.cert.org/advisories/CA-1992-20.html Patch, Third Party Advisory, US Government Resource