Details of VAR-201205-0226

ID

VAR-201205-0226

CVE

CVE-2012-0339

TITLE

Cisco IOS In any IP From address TELNET Vulnerability that establishes a connection

Trust: 0.8

sources: JVNDB: JVNDB-2012-002205

DESCRIPTION

Cisco IOS 12.2 through 12.4 and 15.0 does not recognize the vrf-also keyword during enforcement of access-class commands, which allows remote attackers to establish TELNET connections from arbitrary source IP addresses via a standard TELNET client, aka Bug ID CSCsi77774. IOS is prone to a remote security vulnerability. Cisco IOS is an operating system developed by Cisco in the United States for its network equipment

Trust: 1.98

sources: NVD: CVE-2012-0339 // JVNDB: JVNDB-2012-002205 // BID: 78289 // VULHUB: VHN-53620

AFFECTED PRODUCTS

vendor:	cisco	model:	ios	scope:	eq	version:	15.0	Trust: 2.7
vendor:	cisco	model:	ios	scope:	eq	version:	12.4	Trust: 2.7
vendor:	cisco	model:	ios	scope:	eq	version:	12.3	Trust: 2.7
vendor:	cisco	model:	ios	scope:	eq	version:	12.2	Trust: 2.7

sources: BID: 78289 // JVNDB: JVNDB-2012-002205 // CNNVD: CNNVD-201205-051 // NVD: CVE-2012-0339

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2012-0339
value:	MEDIUM
Trust: 1.0
NVD:	CVE-2012-0339
value:	MEDIUM
Trust: 0.8
CNNVD:	CNNVD-201205-051
value:	MEDIUM
Trust: 0.6
VULHUB:	VHN-53620
value:	MEDIUM
Trust: 0.1

nvd@nist.gov:	CVE-2012-0339
severity:	MEDIUM
baseScore:	5.0
vectorString:	AV:N/AC:L/AU:N/C:N/I:P/A:N
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	PARTIAL
availabilityImpact:	NONE
exploitabilityScore:	10.0
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.8
VULHUB:	VHN-53620
severity:	MEDIUM
baseScore:	5.0
vectorString:	AV:N/AC:L/AU:N/C:N/I:P/A:N
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	PARTIAL
availabilityImpact:	NONE
exploitabilityScore:	10.0
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

sources: VULHUB: VHN-53620 // JVNDB: JVNDB-2012-002205 // CNNVD: CNNVD-201205-051 // NVD: CVE-2012-0339

PROBLEMTYPE DATA

problemtype:

CWE-20

Trust: 1.9

sources: VULHUB: VHN-53620 // JVNDB: JVNDB-2012-002205 // NVD: CVE-2012-0339

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201205-051

TYPE

input validation

Trust: 0.6

sources: CNNVD: CNNVD-201205-051

CONFIGURATIONS

sources: JVNDB: JVNDB-2012-002205

PATCH

title:

Caveats in 12.2(18)SXF Rebuilds

url:

http://www.cisco.com/en/US/docs/switches/lan/catalyst6500/ios/12.2SXF/native/release/notes/caveats_SXF_rebuilds.html

Trust: 0.8

sources: JVNDB: JVNDB-2012-002205

EXTERNAL IDS

db:	NVD	id:	CVE-2012-0339	Trust: 2.8
db:	SECTRACK	id:	1027005	Trust: 1.4
db:	JVNDB	id:	JVNDB-2012-002205	Trust: 0.8
db:	CNNVD	id:	CNNVD-201205-051	Trust: 0.7
db:	BID	id:	78289	Trust: 0.4
db:	VULHUB	id:	VHN-53620	Trust: 0.1

sources: VULHUB: VHN-53620 // BID: 78289 // JVNDB: JVNDB-2012-002205 // CNNVD: CNNVD-201205-051 // NVD: CVE-2012-0339

REFERENCES

url:	http://www.cisco.com/en/us/docs/switches/lan/catalyst6500/ios/12.2sxf/native/release/notes/caveats_sxf_rebuilds.html	Trust: 2.0
url:	http://www.securitytracker.com/id?1027005	Trust: 1.4
url:	http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2012-0339	Trust: 0.8
url:	http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2012-0339	Trust: 0.8

sources: VULHUB: VHN-53620 // BID: 78289 // JVNDB: JVNDB-2012-002205 // CNNVD: CNNVD-201205-051 // NVD: CVE-2012-0339

CREDITS

Unknown

Trust: 0.3

sources: BID: 78289

SOURCES

db:	VULHUB	id:	VHN-53620
db:	BID	id:	78289
db:	JVNDB	id:	JVNDB-2012-002205
db:	CNNVD	id:	CNNVD-201205-051
db:	NVD	id:	CVE-2012-0339

LAST UPDATE DATE

2025-04-11T22:49:39.550000+00:00

SOURCES UPDATE DATE

db:	VULHUB	id:	VHN-53620	date:	2012-10-30T00:00:00
db:	BID	id:	78289	date:	2012-05-02T00:00:00
db:	JVNDB	id:	JVNDB-2012-002205	date:	2012-05-08T00:00:00
db:	CNNVD	id:	CNNVD-201205-051	date:	2012-05-03T00:00:00
db:	NVD	id:	CVE-2012-0339	date:	2025-04-11T00:51:21.963

SOURCES RELEASE DATE

db:	VULHUB	id:	VHN-53620	date:	2012-05-02T00:00:00
db:	BID	id:	78289	date:	2012-05-02T00:00:00
db:	JVNDB	id:	JVNDB-2012-002205	date:	2012-05-08T00:00:00
db:	CNNVD	id:	CNNVD-201205-051	date:	2012-05-03T00:00:00
db:	NVD	id:	CVE-2012-0339	date:	2012-05-02T10:09:22.177