CVE-2009-2862

Sažetak

The Object Groups for Access Control Lists (ACLs) feature in Cisco IOS 12.2XNB, 12.2XNC, 12.2XND, 12.4MD, 12.4T, 12.4XZ, and 12.4YA allows remote attackers to bypass intended access restrictions via crafted requests, aka Bug IDs CSCsx07114, CSCsu70214, CSCsw47076, CSCsv48603, CSCsy54122, and CSCsu50252.

Reference

http://www.cisco.com/en/US/products/products_security_advisory09186a0080af8119.shtml
http://tools.cisco.com/security/center/viewAlert.x?alertId=18876
http://osvdb.org/58338
http://www.securitytracker.com/id?1022933
http://www.vupen.com/english/advisories/2009/2759
http://www.securityfocus.com/bid/36495

CVSS

Base:	4.3
Impact:	2.9
Exploitability:	8.6

Pristup

Vektor	Složenost	Autentikacija
NETWORK	MEDIUM	NONE

Impact

Povjerljivost	Cjelovitost	Dostupnost
PARTIAL	NONE	NONE

CVSS vektor

AV:N/AC:M/Au:N/C:P/I:N/A:N

Zadnje važnije ažuriranje

02-06-2022 - 17:23

Objavljeno

28-09-2009 - 19:30