Lucene search

K
cveMitreCVE-2001-0865
HistoryMar 09, 2002 - 5:00 a.m.

CVE-2001-0865

2002-03-0905:00:00
mitre
web.nvd.nist.gov
35
cisco 12000
ios 12.0
security vulnerability
fragment keyword
acl
nvd

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

6.6

Confidence

Low

EPSS

0.005

Percentile

75.7%

Cisco 12000 with IOS 12.0 and line cards based on Engine 2 does not support the “fragment” keyword in an outgoing ACL, which could allow fragmented packets in violation of the intended access.

Affected configurations

Nvd
Node
cisco12000_router
VendorProductVersionCPE
cisco12000_router*cpe:2.3:h:cisco:12000_router:*:*:*:*:*:*:*:*

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

6.6

Confidence

Low

EPSS

0.005

Percentile

75.7%

Related for CVE-2001-0865