CVEvulnerability
CVE-2009-2862
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2009-09-28
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:P/I:N/A:N
Description
The Object Groups for Access Control Lists (ACLs) feature in Cisco IOS 12.2XNB, 12.2XNC, 12.2XND, 12.4MD, 12.4T, 12.4XZ, and 12.4YA allows remote attackers to bypass intended access restrictions via crafted requests, aka Bug IDs CSCsx07114, CSCsu70214, CSCsw47076, CSCsv48603, CSCsy54122, and CSCsu50252.
Affected configurations
• cisco ios 12.2xnb
• cisco ios 12.2xnc
• cisco ios 12.2xnd
• cisco ios 12.4md
• cisco ios 12.4t
• cisco ios 12.4xz
• cisco ios 12.4ya
References
- http://osvdb.org/58338 Broken Link
- http://tools.cisco.com/security/center/viewAlert.x?alertId=18876 Vendor Advisory
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080af8119.shtml Vendor Advisory
- http://www.securityfocus.com/bid/36495 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id?1022933 Broken Link, Third Party Advisory, VDB Entry
- http://www.vupen.com/english/advisories/2009/2759 Permissions Required
- http://osvdb.org/58338 Broken Link
- http://tools.cisco.com/security/center/viewAlert.x?alertId=18876 Vendor Advisory
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080af8119.shtml Vendor Advisory
- http://www.securityfocus.com/bid/36495 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id?1022933 Broken Link, Third Party Advisory, VDB Entry
- http://www.vupen.com/english/advisories/2009/2759 Permissions Required