CVEvulnerability
CVE-2001-0929
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2001-11-28
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
Cisco IOS Firewall Feature set, aka Context Based Access Control (CBAC) or Cisco Secure Integrated Software, for IOS 11.2P through 12.2T does not properly check the IP protocol type, which could allow remote attackers to bypass access control lists.
Affected configurations
• cisco ios 11.2p
• cisco ios 11.3t
• cisco ios 12.0
• cisco ios 12.0t
• cisco ios 12.1
• cisco ios 12.1e
• cisco ios 12.1t
• cisco ios 12.2
• cisco ios 12.2t
References
- http://www.cisco.com/warp/public/707/IOS-cbac-dynacl-pub.shtml Patch, Vendor Advisory
- http://www.kb.cert.org/vuls/id/362483 US Government Resource
- http://www.osvdb.org/808 www.osvdb.org
- http://www.securityfocus.com/bid/3588 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/7614 exchange.xforce.ibmcloud.com
- http://www.cisco.com/warp/public/707/IOS-cbac-dynacl-pub.shtml Patch, Vendor Advisory
- http://www.kb.cert.org/vuls/id/362483 US Government Resource
- http://www.osvdb.org/808 www.osvdb.org
- http://www.securityfocus.com/bid/3588 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/7614 exchange.xforce.ibmcloud.com