Details of VAR-201205-0023

ID

VAR-201205-0023

CVE

CVE-2011-4016

TITLE

Cisco IOS of PPP Service disruption in implementations ( Device crash ) Vulnerabilities

Trust: 0.8

sources: JVNDB: JVNDB-2012-002224

DESCRIPTION

The PPP implementation in Cisco IOS 12.2 and 15.0 through 15.2, when Point-to-Point Termination and Aggregation (PTA) and L2TP are used, allows remote attackers to cause a denial of service (device crash) via crafted network traffic, aka Bug ID CSCtf71673. IOS is prone to a denial-of-service vulnerability. Cisco IOS is an operating system developed by Cisco in the United States for its network equipment

Trust: 1.98

sources: NVD: CVE-2011-4016 // JVNDB: JVNDB-2012-002224 // BID: 78407 // VULHUB: VHN-51961

AFFECTED PRODUCTS

vendor:	cisco	model:	ios	scope:	eq	version:	15.2	Trust: 2.7
vendor:	cisco	model:	ios	scope:	eq	version:	15.1	Trust: 2.7
vendor:	cisco	model:	ios	scope:	eq	version:	15.0	Trust: 2.7
vendor:	cisco	model:	ios	scope:	eq	version:	12.2	Trust: 2.7

sources: BID: 78407 // JVNDB: JVNDB-2012-002224 // CNNVD: CNNVD-201205-045 // NVD: CVE-2011-4016

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2011-4016
value:	MEDIUM
Trust: 1.0
NVD:	CVE-2011-4016
value:	MEDIUM
Trust: 0.8
CNNVD:	CNNVD-201205-045
value:	MEDIUM
Trust: 0.6
VULHUB:	VHN-51961
value:	MEDIUM
Trust: 0.1

nvd@nist.gov:	CVE-2011-4016
severity:	MEDIUM
baseScore:	5.4
vectorString:	AV:N/AC:H/AU:N/C:N/I:N/A:C
accessVector:	NETWORK
accessComplexity:	HIGH
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	COMPLETE
exploitabilityScore:	4.9
impactScore:	6.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.8
VULHUB:	VHN-51961
severity:	MEDIUM
baseScore:	5.4
vectorString:	AV:N/AC:H/AU:N/C:N/I:N/A:C
accessVector:	NETWORK
accessComplexity:	HIGH
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	COMPLETE
exploitabilityScore:	4.9
impactScore:	6.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

sources: VULHUB: VHN-51961 // JVNDB: JVNDB-2012-002224 // CNNVD: CNNVD-201205-045 // NVD: CVE-2011-4016

PROBLEMTYPE DATA

problemtype:	CWE-20	Trust: 1.1
problemtype:	CWE-284	Trust: 1.1
problemtype:	CWE-16	Trust: 0.8

sources: VULHUB: VHN-51961 // JVNDB: JVNDB-2012-002224 // NVD: CVE-2011-4016

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201205-045

TYPE

input validation

Trust: 0.6

sources: CNNVD: CNNVD-201205-045

CONFIGURATIONS

sources: JVNDB: JVNDB-2012-002224

PATCH

title:

Release 15.1(2)T Caveats

url:

http://www.cisco.com/en/US/docs/ios/15_1/release/notes/151-2TCAVS.html

Trust: 0.8

sources: JVNDB: JVNDB-2012-002224

EXTERNAL IDS

db:	NVD	id:	CVE-2011-4016	Trust: 2.8
db:	SECTRACK	id:	1027005	Trust: 1.4
db:	JVNDB	id:	JVNDB-2012-002224	Trust: 0.8
db:	CNNVD	id:	CNNVD-201205-045	Trust: 0.7
db:	BID	id:	78407	Trust: 0.4
db:	VULHUB	id:	VHN-51961	Trust: 0.1

sources: VULHUB: VHN-51961 // BID: 78407 // JVNDB: JVNDB-2012-002224 // CNNVD: CNNVD-201205-045 // NVD: CVE-2011-4016

REFERENCES

url:	http://www.cisco.com/en/us/docs/ios/15_1/release/notes/151-2tcavs.html	Trust: 2.0
url:	http://www.securitytracker.com/id?1027005	Trust: 1.4
url:	http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2011-4016	Trust: 0.8
url:	http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2011-4016	Trust: 0.8

sources: VULHUB: VHN-51961 // BID: 78407 // JVNDB: JVNDB-2012-002224 // CNNVD: CNNVD-201205-045 // NVD: CVE-2011-4016

CREDITS

Unknown

Trust: 0.3

sources: BID: 78407

SOURCES

db:	VULHUB	id:	VHN-51961
db:	BID	id:	78407
db:	JVNDB	id:	JVNDB-2012-002224
db:	CNNVD	id:	CNNVD-201205-045
db:	NVD	id:	CVE-2011-4016

LAST UPDATE DATE

2025-04-11T22:49:39.520000+00:00

SOURCES UPDATE DATE

db:	VULHUB	id:	VHN-51961	date:	2016-12-07T00:00:00
db:	BID	id:	78407	date:	2012-05-02T00:00:00
db:	JVNDB	id:	JVNDB-2012-002224	date:	2012-05-08T00:00:00
db:	CNNVD	id:	CNNVD-201205-045	date:	2012-05-03T00:00:00
db:	NVD	id:	CVE-2011-4016	date:	2025-04-11T00:51:21.963

SOURCES RELEASE DATE

db:	VULHUB	id:	VHN-51961	date:	2012-05-02T00:00:00
db:	BID	id:	78407	date:	2012-05-02T00:00:00
db:	JVNDB	id:	JVNDB-2012-002224	date:	2012-05-08T00:00:00
db:	CNNVD	id:	CNNVD-201205-045	date:	2012-05-03T00:00:00
db:	NVD	id:	CVE-2011-4016	date:	2012-05-02T10:09:21.817