Cisco Content Services Gateway Service Policy Security Bypass Vulnerability

Bugtraq ID:	46022
Class:	Unknown
CVE:	CVE-2011-0348
Remote:	Yes
Local:	No
Published:	Jan 26 2011 12:00AM
Updated:	Jan 26 2011 12:00AM
Credit:	Cisco
Vulnerable:	Cisco Ios 12.4(24)MDA Cisco IOS 12.4(24)MD Cisco IOS 12.4(24)MD Cisco IOS 12.4(22)MDA2 Cisco IOS 12.4(22)MDA1 Cisco IOS 12.4(22)MDA Cisco IOS 12.4(22)MD1 Cisco IOS 12.4(22)MD Cisco IOS 12.4(15)MD4 Cisco IOS 12.4(15)MD3 Cisco IOS 12.4(15)MD2 Cisco IOS 12.4(15)MD1 Cisco IOS 12.4(15)MD Cisco IOS 12.4(11)MD9 Cisco IOS 12.4(11)MD7 Cisco IOS 12.4(11)MD4 Cisco IOS 12.4(11)MD10 Cisco IOS 12.4(11)MD
Not Vulnerable:	Cisco Ios 12.4(24)MDA3 Cisco Ios 12.4(24)MD3 Cisco Ios 12.4(22)MDA5

Cisco Content Services Gateway Service Policy Security Bypass Vulnerability

Cisco Content Services Gateway is prone to a security-bypass vulnerability.

Exploiting this issue may allow attackers to access sites that are non-accounted or billed. This may lead to other attacks.

This issue is being tracked by Cisco Bug ID CSCtk35917.

Cisco Content Services Gateway Service Policy Security Bypass Vulnerability

Attackers can use readily available tools to exploit this issue.

Cisco Content Services Gateway Service Policy Security Bypass Vulnerability

Solution:
Updates are available. Please see the references for more information.

Cisco Content Services Gateway Service Policy Security Bypass Vulnerability

References:

• Cisco Homepage (Cisco )
  
• Cisco Security Advisory: Cisco Content Services Gateway Vulnerabilities (Cisco)