CVE-2001-0929: High severity Cisco IOS vulnerability

Published Nov 28, 2001

Updated

Cisco IOS Firewall Feature set, aka Context Based Access Control (CBAC) or Cisco Secure Integrated Software, for IOS 11.2P through 12.2T does not properly check the IP protocol type, which could allow remote attackers to bypass access control lists.

Affected Software

9 affected components

Cisco IOS=12.1e

Cisco IOS=12.1t

Cisco IOS=12.2t

Cisco IOS=12.0t

Cisco IOS=11.2p

Cisco IOS=12.1

Cisco IOS=11.3t

Cisco IOS=12.2

Cisco IOS=12.0

Remediation

Patch Available

http://www.cisco.com/warp/public/707/IOS-cbac-dynacl-pub.shtml

Event History

Nov 28, 2001

CVE Published

05:00 AM

Jun 25, 2002

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2001-0929?

CVE-2001-0929 is classified as a high-severity vulnerability due to its potential to allow remote attackers to bypass access control lists.

How do I fix CVE-2001-0929?

To mitigate CVE-2001-0929, upgrade to a patched version of Cisco IOS that addresses the IP protocol type checking issue.

What versions of Cisco IOS are affected by CVE-2001-0929?

CVE-2001-0929 affects Cisco IOS versions 11.2P through 12.2T.

What is the impact of CVE-2001-0929 on network security?

CVE-2001-0929 could allow unauthorized access to network resources by bypassing configured access control lists.

Is CVE-2001-0929 still relevant today?

CVE-2001-0929 remains relevant for organizations using unsupported or outdated versions of Cisco IOS that may still be in operation.