Andrea Lazzari’s blog

“I’m not a number, I’m a free man…”

29 09 2007

Cisco Catalyst 6500 and Cisco 7600 Loopback Access Control Bypass Vulnerability

Posted by: Andrea L. in sicurezza, tags: bug, cisco, exploit

Bugtraq ID: 25822

Class: Access Validation Error

CVE:

Remote: Yes

Local: No

Published: Sep 26 2007 12:00AM

Updated: Sep 28 2007 04:39PM

Credit: The vendor credits Lee E. Rian with the discovery of this vulnerability.

Vulnerable:

Cisco Catalyst 7600 3.1 (1a)WS-X6380-NAM

Cisco Catalyst 7600 3.1 (1a)WS-SVC-NAM-2

Cisco Catalyst 7600 3.1 (1a)WS-SVC-NAM-1

Cisco Catalyst 7600 2.2 (1a)WS-SVC-NAM-2

Cisco Catalyst 7600 2.2 (1a)WS-SVC-NAM-1

Cisco Catalyst 7600 2.1 (2)WS-X6380-NAM

Cisco Catalyst 7600 Sup720/MSFC3

Cisco Catalyst 7600 Sup2/MSFC2

Cisco Catalyst 6500 7.6 (1)

Cisco Catalyst 6500 7.5 (1)

Cisco Catalyst 6500 5.4.1

Cisco Catalyst 6500 3.1 (1a)WS-X6380-NAM

Cisco Catalyst 6500 3.1 (1a)WS-SVC-NAM-2

Cisco Catalyst 6500 3.1 (1a)WS-SVC-NAM-1

Cisco Catalyst 6500 2.2 (1a)WS-SVC-NAM-2

[From Cisco Catalyst 6500 and Cisco 7600 Loopback Access Control Bypass Vulnerability]

Lasciatemi aggiungere … Per fortuna che se ne sono accorti in Cisco di questa “cosuccia” altrimenti sai che disastro?

This entry was posted on Saturday, September 29th, 2007 at 1:38 pm and is filed under sicurezza.You can follow any responses to this entry through the RSS 2.0 feed. You can skip to the end and leave a response. Pinging is currently not allowed.