Vulnerabilities > CVE-1999-1306 - Unspecified vulnerability in Cisco IOS

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

PARTIAL

Integrity impact

PARTIAL

Availability impact

PARTIAL

network

low complexity

cisco

NVD

Published: 1992-12-10

Updated: 2008-09-05

Summary

Cisco IOS 9.1 and earlier does not properly handle extended IP access lists when the IP route cache is enabled and the "established" keyword is set, which could allow attackers to bypass filters.

Vulnerable Configurations

Part	Description	Count
OS	Cisco Cisco IOS \(4\)St Cisco IOS - Cisco IOS 3.3.0Se Cisco IOS 3.3.0Xo Cisco IOS 3.3.1Se Cisco IOS 3.3.1Xo Cisco IOS 3.3.2Se Cisco IOS 3.3.2Xo Cisco IOS 3.3.3Se Cisco IOS 3.3.4Se Cisco IOS 3.3.5Se Cisco IOS 3.5.0E Cisco IOS 3.5.1E Cisco IOS 3.5.2E Cisco IOS 3.5.3E Cisco IOS 3.6.0E Cisco IOS 3.6.1E Cisco IOS 3.6.2Ae Cisco IOS 3.6.2E Cisco IOS 3.6.3E Cisco IOS 3.6.4E Cisco IOS 3.7.0E Cisco IOS 3.7.1E Cisco IOS 3.7.2E Cisco IOS 3.7.3E Cisco IOS 3.16.8S Cisco IOS 4.1 Cisco IOS 4.1.1 Cisco IOS 4.1.2 Cisco IOS 8.2 Cisco IOS 8.3 Cisco IOS 9.0 Cisco IOS 9.1	33

References

http://www.cert.org/advisories/CA-1992-20.html