ID CVE-2001-0444
Summary Cisco CBOS 2.3.0.053 sends output of the "sh nat" (aka "show nat") command to the terminal of the next user who attempts to connect to the router via telnet, which could allow that user to obtain sensitive information.
References
Vulnerable Configurations
  • cpe:2.3:o:cisco:cbos:2.3.053:*:*:*:*:*:*:*
    cpe:2.3:o:cisco:cbos:2.3.053:*:*:*:*:*:*:*
  • cpe:2.3:o:cisco:cbos:2.4.1:*:*:*:*:*:*:*
    cpe:2.3:o:cisco:cbos:2.4.1:*:*:*:*:*:*:*
CVSS
Base: 2.1 (as of 10-10-2017 - 01:29)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
LOCAL LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL NONE NONE
cvss-vector via4 AV:L/AC:L/Au:N/C:P/I:N/A:N
refmap via4
bid 2635
bugtraq 20010420 Bug in Cisco CBOS v2.3.0.053
osvdb 1796
xf cisco-cbos-gain-information(6453)
Last major update 10-10-2017 - 01:29
Published 02-07-2001 - 04:00
Last modified 10-10-2017 - 01:29
Back to Top