CVE-2001-0863

Currently unrated

Key Information:

Vendor
Cisco
Status
12000 Router
Vendor
CVE Published:
6 December 2001

Summary

Cisco 12000 with IOS 12.0 and line cards based on Engine 2 does not handle the "fragment" keyword in a compiled ACL (Turbo ACL) for packets that are sent to the router, which allows remote attackers to cause a denial of service via a flood of fragments.

References

http://www.ciac.org/ciac/bulletins/m-018.shtml
third-party-advisorygovernment-resourcex_refsource_CIAC
http://www.cisco.com/warp/public/707/GSR-ACL-pub.shtml
vendor-advisoryx_refsource_CISCO
http://www.osvdb.org/1987
vdb-entryx_refsource_OSVDB

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.