CVE-1999-0775: Critical severity Cisco IOS vulnerability
Cisco Gigabit Switch routers running IOS allow remote attackers to forward unauthorized packets due to improper handling of the "established" keyword in an access list.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Do not use the 'established' keyword in access lists on affected Cisco IOS devices; remove or replace access-list entries that use 'established' until a vendor-supplied fix is available.
Cisco IOS (access-list) 'established' keyword = avoid/remove
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0775?
CVE-1999-0775 is classified as a high severity vulnerability due to the potential for remote attackers to forward unauthorized packets.
How do I fix CVE-1999-0775?
To mitigate CVE-1999-0775, ensure that proper access controls are configured in your Cisco IOS access lists.
What is the impact of CVE-1999-0775?
The impact of CVE-1999-0775 includes unauthorized packet forwarding, which can lead to data interception or network disruption.
Which versions of Cisco IOS are affected by CVE-1999-0775?
CVE-1999-0775 affects Cisco IOS versions 11.2(15)g and 11.2(14)gs2.
What is the nature of the vulnerability in CVE-1999-0775?
The nature of the vulnerability in CVE-1999-0775 is improper handling of the 'established' keyword in access lists, allowing malicious actions.