Cisco IOS Crypto Engine Accelerator Access Control List Circumvention Vulnerability
BID:7605
Info
Cisco IOS Crypto Engine Accelerator Access Control List Circumvention Vulnerability
| Bugtraq ID: | 7605 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | May 14 2003 12:00AM |
| Updated: | May 14 2003 12:00AM |
| Credit: | Discovery credited to Olivier <[email protected]>. |
| Vulnerable: |
Cisco IOS 12.2YH Cisco IOS 12.2YG Cisco IOS 12.2YF Cisco IOS 12.2YD Cisco IOS 12.2YC Cisco IOS 12.2YB Cisco IOS 12.2YA Cisco IOS 12.2XW Cisco IOS 12.2XT Cisco IOS 12.2XS Cisco IOS 12.2XR Cisco IOS 12.2XQ Cisco IOS 12.2XQ Cisco IOS 12.2XN Cisco IOS 12.2XM Cisco IOS 12.2XL Cisco IOS 12.2XK Cisco IOS 12.2XK Cisco IOS 12.2XK Cisco IOS 12.2XJ Cisco IOS 12.2XJ Cisco IOS 12.2XI Cisco IOS 12.2XH Cisco IOS 12.2XG Cisco IOS 12.2XF Cisco IOS 12.2XE Cisco IOS 12.2XD Cisco IOS 12.2XC Cisco IOS 12.2XB Cisco IOS 12.2XA Cisco IOS 12.2T Cisco IOS 12.2S Cisco IOS 12.2PI Cisco IOS 12.2PB Cisco IOS 12.2MB Cisco IOS 12.2DD Cisco IOS 12.2DA Cisco IOS 12.2BX Cisco IOS 12.2BC Cisco IOS 12.2B Cisco IOS 12.2(9)S Cisco IOS 12.2(8)T Cisco IOS 12.2(8)BC1 Cisco IOS 12.2(7a) Cisco IOS 12.2(7.4)S Cisco IOS 12.2(7)DA Cisco IOS 12.2(7) Cisco IOS 12.2(6c) Cisco IOS 12.2(6.8)T1a Cisco IOS 12.2(6.8)T0a Cisco IOS 12.2(5d) Cisco IOS 12.2(5)CA1 Cisco IOS 12.2(5) Cisco IOS 12.2(4)YB Cisco IOS 12.2(4)YA1 Cisco IOS 12.2(4)YA Cisco IOS 12.2(4)XW1 Cisco IOS 12.2(4)XW Cisco IOS 12.2(4)XM2 Cisco IOS 12.2(4)XM Cisco IOS 12.2(4)XL4 Cisco IOS 12.2(4)XL Cisco IOS 12.2(4)T3 Cisco IOS 12.2(4)T Cisco IOS 12.2(4)MX1 Cisco IOS 12.2(4)MX Cisco IOS 12.2(4)MB3 Cisco IOS 12.2(4)BX Cisco IOS 12.2(4)BX Cisco IOS 12.2(4)BC1a Cisco IOS 12.2(4)BC1 Cisco IOS 12.2(4)B4 Cisco IOS 12.2(4)B3 Cisco IOS 12.2(4)B2 Cisco IOS 12.2(4)B1 Cisco IOS 12.2(4) Cisco IOS 12.2(3d) Cisco IOS 12.2(3.4)BP Cisco IOS 12.2(3) Cisco IOS 12.2(2.2)T Cisco IOS 12.2(2)YC Cisco IOS 12.2(2)XU2 Cisco IOS 12.2(2)XU Cisco IOS 12.2(2)XT3 Cisco IOS 12.2(2)XT Cisco IOS 12.2(2)XN Cisco IOS 12.2(2)XK2 Cisco IOS 12.2(2)XK Cisco IOS 12.2(2)XJ1 Cisco IOS 12.2(2)XJ Cisco IOS 12.2(2)XI2 Cisco IOS 12.2(2)XI1 Cisco IOS 12.2(2)XI Cisco IOS 12.2(2)XH3 Cisco IOS 12.2(2)XH2 Cisco IOS 12.2(2)XH Cisco IOS 12.2(2)XG Cisco IOS 12.2(2)XF Cisco IOS 12.2(2)XB4 Cisco IOS 12.2(2)XB3 Cisco IOS 12.2(2)XB Cisco IOS 12.2(2)XA5 Cisco IOS 12.2(2)XA1 Cisco IOS 12.2(2)XA Cisco IOS 12.2(2)T4 Cisco IOS 12.2(2)DD3 Cisco IOS 12.2(2)BY2 Cisco IOS 12.2(2)BY Cisco IOS 12.2(2)BY Cisco IOS 12.2(2)BX Cisco IOS 12.2(2)B Cisco IOS 12.2(1d) Cisco IOS 12.2(1b)DA1 Cisco IOS 12.2(1b) Cisco IOS 12.2(13.03)B Cisco IOS 12.2(13)T1 Cisco IOS 12.2(12.05)T Cisco IOS 12.2(12.05)S Cisco IOS 12.2(12.05) Cisco IOS 12.2(12.02)T Cisco IOS 12.2(12.02)S Cisco IOS 12.2(11)T3 Cisco IOS 12.2(11)T Cisco IOS 12.2(1.4)S Cisco IOS 12.2(1.1)PI Cisco IOS 12.2(1.1) Cisco IOS 12.2(1)XS1 Cisco IOS 12.2(1)XS Cisco IOS 12.2(1)XQ Cisco IOS 12.2(1)XH Cisco IOS 12.2(1)XE3 Cisco IOS 12.2(1)XE2 Cisco IOS 12.2(1)XE Cisco IOS 12.2(1)XE Cisco IOS 12.2(1)XE Cisco IOS 12.2(1)XD4 Cisco IOS 12.2(1)XD3 Cisco IOS 12.2(1)XD1 Cisco IOS 12.2(1)XD1 Cisco IOS 12.2(1)XD Cisco IOS 12.2(1)XA Cisco IOS 12.2(1)DX Cisco IOS 12.2(1) Cisco IOS 12.2 |
| Not Vulnerable: | |
Discussion
Cisco IOS Crypto Engine Accelerator Access Control List Circumvention Vulnerability
It has been reported that enabled the crypto engine accelerator on Cisco routers using access control list entries may allow access for unauthorized types of traffic. This could allow an attacker to circumvent access control list policy to gain access to network resources.
It has been reported that enabled the crypto engine accelerator on Cisco routers using access control list entries may allow access for unauthorized types of traffic. This could allow an attacker to circumvent access control list policy to gain access to network resources.
Exploit / POC
Cisco IOS Crypto Engine Accelerator Access Control List Circumvention Vulnerability
No exploit is required for this vulnerability.
No exploit is required for this vulnerability.
Solution / Fix
Cisco IOS Crypto Engine Accelerator Access Control List Circumvention Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
Cisco IOS Crypto Engine Accelerator Access Control List Circumvention Vulnerability
References:
References: