CVEvulnerability

CVE-2008-1156

5.1 MEDIUM Published 2008-03-27 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2008-03-27
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.1 MEDIUM — AV:N/AC:H/Au:N/C:P/I:P/A:P
Weaknesses
CWE-16, CWE-200

Description

Unspecified vulnerability in the Multicast Virtual Private Network (MVPN) implementation in Cisco IOS 12.0, 12.2, 12.3, and 12.4 allows remote attackers to create "extra multicast states on the core routers" via a crafted Multicast Distribution Tree (MDT) Data Join message.

Affected configurations

• cisco cisco ios 12.3 • cisco cisco ios 12.4 • cisco ios 12.0 • cisco ios 12.2

Related

Weakness · not in database (1)

Weakness · CWE (1)

  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness

References