CVE-2001-0867

Currently unrated

Key Information:

Vendor
Cisco
Status
12000 Router
Vendor
CVE Published:
6 December 2001

Summary

Cisco 12000 with IOS 12.0 and line cards based on Engine 2 does not properly filter does not properly filter packet fragments even when the "fragment" keyword is used in an ACL, which allows remote attackers to bypass the intended access controls.

References

http://www.ciac.org/ciac/bulletins/m-018.shtml
third-party-advisorygovernment-resourcex_refsource_CIAC
http://www.cisco.com/warp/public/707/GSR-ACL-pub.shtml
vendor-advisoryx_refsource_CISCO
http://www.securityfocus.com/bid/3538
vdb-entryx_refsource_BID

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.