ID CVE-2001-0650
Summary Cisco devices IOS 12.0 and earlier allow a remote attacker to cause a crash, or bad route updates, via malformed BGP updates with unrecognized transitive attribute.
References
Vulnerable Configurations
  • cpe:2.3:o:cisco:ios:11.2:*:*:*:*:*:*:*
    cpe:2.3:o:cisco:ios:11.2:*:*:*:*:*:*:*
  • cpe:2.3:o:cisco:ios:11.3:*:*:*:*:*:*:*
    cpe:2.3:o:cisco:ios:11.3:*:*:*:*:*:*:*
  • cpe:2.3:o:cisco:ios:12.0:*:*:*:*:*:*:*
    cpe:2.3:o:cisco:ios:12.0:*:*:*:*:*:*:*
CVSS
Base: 5.0 (as of 10-10-2017 - 01:29)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
NONE NONE PARTIAL
cvss-vector via4 AV:N/AC:L/Au:N/C:N/I:N/A:P
refmap via4
bid 2733
cert-vn VU#106392
ciac L-082
cisco 20010510 Cisco IOS BGP Attribute Corruption Vulnerability
osvdb 1830
xf cisco-ios-bgp-dos(6566)
Last major update 10-10-2017 - 01:29
Published 20-09-2001 - 04:00
Last modified 10-10-2017 - 01:29
Back to Top