ID
VAR-200112-0001
CVE
CVE-2001-0863
TITLE
Cisco Fragment Keyword Outgoing Access Control Vulnerability
Trust: 0.9
DESCRIPTION
Cisco 12000 with IOS 12.0 and line cards based on Engine 2 does not handle the "fragment" keyword in a compiled ACL (Turbo ACL) for packets that are sent to the router, which allows remote attackers to cause a denial of service via a flood of fragments. IOS is the Cisco Internet Operating System, distributed with and used on various Cisco network hardware. A possible vulnerability in IOS on the 12000 series Cisco routers could make it possible for a remote user to send unauthorized traffic to a protected network. IOS for the Cisco 12000 has only recently added the ability to filter fragmented packets in outgoing traffic. If a 'fragment' rule in an outgoing ACL exists in a version without this feature, attackers may be able to evade it and send fragmented packets to a protect network. This vulnerability may result in attackers or users bypassing security policy
Trust: 1.26
AFFECTED PRODUCTS
| vendor: | cisco | model: | 12000 router | scope: | eq | version: | * | Trust: 1.0 |
| vendor: | cisco | model: | 12000 router | scope: | - | version: | - | Trust: 0.6 |
| vendor: | cisco | model: | ios 12.0st | scope: | - | version: | - | Trust: 0.3 |
| vendor: | cisco | model: | ios 12.0s | scope: | - | version: | - | Trust: 0.3 |
CVSS
SEVERITY | CVSSV2 | CVSSV3 | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
PROBLEMTYPE DATA
| problemtype: | NVD-CWE-Other | Trust: 1.0 |
THREAT TYPE
remote
Trust: 0.6
TYPE
Design Error
Trust: 0.9
EXTERNAL IDS
| db: | BID | id: | 3539 | Trust: 2.0 |
| db: | OSVDB | id: | 1987 | Trust: 1.7 |
| db: | NVD | id: | CVE-2001-0863 | Trust: 1.7 |
| db: | CNNVD | id: | CNNVD-200112-073 | Trust: 0.7 |
| db: | CISCO | id: | 20011114 MULTIPLE VULNERABILITIES IN ACCESS CONTROL LIST IMPLEMENTATION FOR CISCO 12000 SERIES INTERNET ROUTER | Trust: 0.6 |
| db: | XF | id: | 7551 | Trust: 0.6 |
| db: | CIAC | id: | M-018 | Trust: 0.6 |
| db: | VULHUB | id: | VHN-3670 | Trust: 0.1 |
REFERENCES
| url: | http://www.securityfocus.com/bid/3539 | Trust: 1.7 |
| url: | http://www.ciac.org/ciac/bulletins/m-018.shtml | Trust: 1.7 |
| url: | http://www.cisco.com/warp/public/707/gsr-acl-pub.shtml | Trust: 1.7 |
| url: | http://www.osvdb.org/1987 | Trust: 1.7 |
| url: | https://exchange.xforce.ibmcloud.com/vulnerabilities/7551 | Trust: 1.1 |
| url: | http://xforce.iss.net/static/7551.php | Trust: 0.6 |
| url: | http://www.cisco.com/warp/public/707/sec_incident_response.shtml | Trust: 0.3 |
CREDITS
This vulnerability was first published in a Cisco Security Advisory on November 14th, 2001.
Trust: 0.9
SOURCES
| db: | VULHUB | id: | VHN-3670 |
| db: | BID | id: | 3539 |
| db: | CNNVD | id: | CNNVD-200112-073 |
| db: | NVD | id: | CVE-2001-0863 |
LAST UPDATE DATE
2025-04-03T22:16:57.137000+00:00
SOURCES UPDATE DATE
| db: | VULHUB | id: | VHN-3670 | date: | 2017-10-10T00:00:00 |
| db: | BID | id: | 3539 | date: | 2001-11-14T00:00:00 |
| db: | CNNVD | id: | CNNVD-200112-073 | date: | 2005-10-12T00:00:00 |
| db: | NVD | id: | CVE-2001-0863 | date: | 2025-04-03T01:03:51.193 |
SOURCES RELEASE DATE
| db: | VULHUB | id: | VHN-3670 | date: | 2001-12-06T00:00:00 |
| db: | BID | id: | 3539 | date: | 2001-11-14T00:00:00 |
| db: | CNNVD | id: | CNNVD-200112-073 | date: | 2001-12-06T00:00:00 |
| db: | NVD | id: | CVE-2001-0863 | date: | 2001-12-06T05:00:00 |