Cisco IOS and IOS XE CVE-2015-0635 Content Spoofing Vulnerability
BID:73341
Info
Cisco IOS and IOS XE CVE-2015-0635 Content Spoofing Vulnerability
| Bugtraq ID: | 73341 |
| Class: | Input Validation Error |
| CVE: |
CVE-2015-0635 |
| Remote: | Yes |
| Local: | No |
| Published: | Mar 25 2015 12:00AM |
| Updated: | Mar 25 2015 12:00AM |
| Credit: | Cisco |
| Vulnerable: |
Cisco Ios Xe 3.13S.0 Cisco Ios Xe 3.12S.2 Cisco Ios Xe 3.12S.1 Cisco Ios Xe 3.12S.0 Cisco IOS XE 3.12S Cisco Ios Xe 3.11S.3 Cisco IOS XE 3.11S.2 Cisco IOS XE 3.11S.1 Cisco Ios Xe 3.11S.0 Cisco Ios Xe 3.10S.5 Cisco Ios Xe 3.10S.4 Cisco Ios Xe 3.10S.3 Cisco Ios Xe 3.10S.2 Cisco Ios Xe 3.10S.1 Cisco IOS XE 3.10S.0 Cisco Ios 15.4SN Cisco IOS 15.4S Cisco Ios 15.4(3)SN1 Cisco IOS 15.4(3)S Cisco Ios 15.4(2)SN1 Cisco Ios 15.4(2)SN Cisco Ios 15.4(2)S2 Cisco Ios 15.4(2)S1 Cisco IOS 15.4(2)S Cisco Ios 15.4(1)S3 Cisco IOS 15.4(1)S2 Cisco IOS 15.4(1)S1 Cisco IOS 15.4(1)S Cisco IOS 15.3S Cisco Ios 15.3JNB Cisco Ios 15.3JN Cisco Ios 15.3JAB Cisco IOS 15.3JA Cisco Ios 15.3(3)S5 Cisco Ios 15.3(3)S4 Cisco IOS 15.3(3)S3 Cisco IOS 15.3(3)S2a Cisco IOS 15.3(3)S2 Cisco Ios 15.3(3)S1 Cisco IOS 15.3(3)S Cisco Ios 15.3(3)JNB Cisco Ios 15.3(3)JN Cisco Ios 15.3(3)JAB1 Cisco Ios 15.3(3)JA1n Cisco IOS 15.3(2)S2 Cisco Ios 15.2JB Cisco IOS 15.2EX Cisco Ios 15.2(2)JB1 Cisco Ios 15.2(1)EX Cisco IOS 15.0ED Cisco IOS 15.0(2)ED1 Cisco Ios 12.4JAZ Cisco Ios 12.4JAP Cisco Ios 12.4JAM Cisco Ios 12.4(25e)JAZ1 Cisco Ios 12.4(25e)JAP1m Cisco Ios 12.4(25e)JAM1 Cisco IOS 12.2SXI Cisco IOS 12.2SQ Cisco IOS 12.2IRE Cisco IOS 12.2IRD Cisco IOS 12.2(44)SQ1 Cisco Ios 12.2(33)SXI4b Cisco IOS 12.2(33)IRE3 Cisco IOS 12.2(33)IRD1 |
| Not Vulnerable: | |
Discussion
Cisco IOS and IOS XE CVE-2015-0635 Content Spoofing Vulnerability
Cisco IOS and IOS XE are prone to a content spoofing vulnerability because it fails to sanitize user-supplied input.
An attacker may leverage this issue to insert and display spoofed content, which may aid in further attacks.
This issue is tracked by Cisco Bug ID CSCup62191.
Cisco IOS and IOS XE are prone to a content spoofing vulnerability because it fails to sanitize user-supplied input.
An attacker may leverage this issue to insert and display spoofed content, which may aid in further attacks.
This issue is tracked by Cisco Bug ID CSCup62191.
Exploit / POC
Cisco IOS and IOS XE CVE-2015-0635 Content Spoofing Vulnerability
Attackers can use standard, readily available tools to exploit this issue.
Attackers can use standard, readily available tools to exploit this issue.
Solution / Fix
Cisco IOS and IOS XE CVE-2015-0635 Content Spoofing Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Cisco IOS and IOS XE CVE-2015-0635 Content Spoofing Vulnerability
References:
References: