Unicast Traffic Leakage in Cisco Catalyst 4000 Series Switches

CVE-2002-2316

Summary

The Cisco Catalyst 4000 series switches exhibit a vulnerability where they do not consistently learn MAC addresses from the initial packet. This flaw can lead to unicast traffic being broadcast across the network, allowing attackers to capture sensitive information by monitoring the traffic. The affected versions, CatOS 5.5.5, 6.3.5, and 7.1.2, necessitate immediate attention to mitigate potential data leakage risks.

References