First published: Thu Apr 20 2000(Updated: )
Cisco IOS 11.x and 12.x allows remote attackers to cause a denial of service by sending the ENVIRON option to the Telnet daemon before it is ready to accept it, which causes the system to reboot.
Credit: cve@mitre.org cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Cisco uBR7200 | ||
Cisco 3660 router | ||
Cisco 7200 | ||
Cisco 7500 router | ||
Cisco 7100 Router | ||
All of | ||
Any of | ||
Cisco IOS | =11.3aa | |
Cisco IOS | =12.0\(2\) | |
Cisco IOS | =12.0\(2\)xc | |
Cisco IOS | =12.0\(2\)xd | |
Cisco IOS | =12.0\(2\)xf | |
Cisco IOS | =12.0\(2\)xg | |
Cisco IOS | =12.0\(3\)t2 | |
Cisco IOS | =12.0\(4\) | |
Cisco IOS | =12.0\(4\)s | |
Cisco IOS | =12.0\(4\)t | |
Cisco IOS | =12.0\(5\) | |
Cisco IOS | =12.0\(6\) | |
Cisco IOS | =12.0\(7\)t | |
Any of | ||
Cisco AccessPath | =ls-3 | |
Cisco AccessPath | =ts-3 | |
Cisco AccessPath | =vs-3 | |
Cisco AS5200 | ||
Cisco AS5300 | ||
Cisco AS5800 Voice Gateway | ||
Cisco System Controller 3640 | ||
Cisco AS5800 Voice Gateway | ||
Cisco IOS | =11.3aa | |
Cisco IOS | =12.0\(2\) | |
Cisco IOS | =12.0\(2\)xc | |
Cisco IOS | =12.0\(2\)xd | |
Cisco IOS | =12.0\(2\)xf | |
Cisco IOS | =12.0\(2\)xg | |
Cisco IOS | =12.0\(3\)t2 | |
Cisco IOS | =12.0\(4\) | |
Cisco IOS | =12.0\(4\)s | |
Cisco IOS | =12.0\(4\)t | |
Cisco IOS | =12.0\(5\) | |
Cisco IOS | =12.0\(6\) | |
Cisco IOS | =12.0\(7\)t | |
Cisco AccessPath | =ls-3 | |
Cisco AccessPath | =ts-3 | |
Cisco AccessPath | =vs-3 | |
Cisco AS5200 | ||
Cisco AS5300 | ||
Cisco AS5800 Voice Gateway | ||
Cisco System Controller 3640 | ||
Cisco AS5800 Voice Gateway |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2000-0268 is considered to have a high severity due to its potential for remote denial of service.
To fix CVE-2000-0268, you should update your Cisco IOS to a non-vulnerable version.
CVE-2000-0268 affects various Cisco devices including the uBR7200, 3660 router, 7200, and 7500 series.
Yes, CVE-2000-0268 can be exploited remotely by sending specific Telnet options to the vulnerable Cisco devices.
Exploiting CVE-2000-0268 can cause the affected Cisco device to reboot, resulting in a denial of service.