CVE-2001-0895: Medium severity Cisco Catalyst 2900xl vulnerability

Published Nov 15, 2001

Updated

Multiple Cisco networking products allow remote attackers to cause a denial of service on the local network via a series of ARP packets sent to the router's interface that contains a different MAC address for the router, which eventually causes the router to overwrite the MAC address in its ARP table.

Affected Software

11 affected components

Cisco Catalyst 2900xl

Cisco Catalyst 2948g-l3

Cisco Catalyst 2950

Cisco Catalyst 3500xl

Cisco Catalyst 3550

Cisco Catalyst 4000

Cisco Catalyst 4908g-l3

Cisco Catalyst 5000

Cisco Catalyst 6000

Cisco Catalyst 8500

Cisco Distributed Director

Remediation

Patch Available

http://www.cisco.com/warp/public/707/IOS-arp-overwrite-vuln-pub.shtml

Event History

Nov 15, 2001

CVE Published

05:00 AM

Jun 25, 2002

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2001-0895?

CVE-2001-0895 is considered to have a high severity due to the potential for remote denial of service attacks.

How do I fix CVE-2001-0895?

To fix CVE-2001-0895, users should update their Cisco devices' firmware to the latest version that addresses this vulnerability.

Which Cisco products are affected by CVE-2001-0895?

CVE-2001-0895 affects multiple Cisco Catalyst models and Cisco Distributed Director devices.

What type of attack does CVE-2001-0895 allow?

CVE-2001-0895 allows remote attackers to execute denial of service attacks against affected Cisco networking products.

What impact does CVE-2001-0895 have on network operations?

CVE-2001-0895 can disrupt normal network operations by causing issues with ARP table entries, resulting in traffic being misrouted.