First published: Fri Dec 31 1999(Updated: )
Vulnerability in Cisco IOS 11.1 through 11.3 with distributed fast switching (DFS) enabled allows remote attackers to bypass certain access control lists when the router switches traffic from a DFS-enabled input interface to an output interface with a logical subinterface, as described by Cisco bug CSCdk43862.
Credit: cve@mitre.org cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Puppet Cisco IOS | <=11.3 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-1999-1465 is considered to be of medium severity as it allows access control list bypass in certain Cisco IOS versions.
To mitigate CVE-1999-1465, upgrade Cisco IOS to a version later than 11.3 where this vulnerability is not present.
CVE-1999-1465 affects Cisco IOS versions from 11.1 up to 11.3 with distributed fast switching enabled.
CVE-1999-1465 can be exploited by remote attackers who can send traffic that utilizes the affected access control lists.
Exploiting CVE-1999-1465 can allow unauthorized access to network traffic, bypassing security controls set by access control lists.