CVE-2009-2863: Race Condition

Published Sep 28, 2009

Updated

Race condition in the Firewall Authentication Proxy feature in Cisco IOS 12.0 through 12.4 allows remote attackers to bypass authentication, or bypass the consent web page, via a crafted request, aka Bug ID CSCsy15227.

Affected Software

136 affected components

Cisco IOS=12.3ym

Cisco IOS=12.3xr

Cisco IOS=12.0xk

Cisco IOS=12.4t

Cisco IOS=12.0xr

Cisco IOS=12.1xm

Cisco IOS=12.1xi

Cisco IOS=12.2sga

Cisco IOS=12.1e

Cisco IOS=12.1xc

Cisco IOS=12.3ya

Cisco IOS=12.1xp

Cisco IOS=12.2cz

Cisco IOS=12.2sxf

Cisco IOS=12.1yd

Cisco IOS=12.2irc

Cisco IOS=12.2xe

Cisco IOS=12.2sx

Cisco IOS=12.3xg

Cisco IOS=12.4xj

Cisco IOS=12.3xd

Cisco IOS=12.4mr

Cisco IOS=12.2xj

Cisco IOS=12.2srb

Cisco IOS=12.2su

Cisco IOS=12.2xg

Cisco IOS=12.2b

Cisco IOS=12.2ixb

Cisco IOS=12.4xt

Cisco IOS=12.2sq

Cisco IOS=12.1t

Cisco IOS=12.1xr

Cisco IOS=12.2yn

Cisco IOS=12.2sxa

Cisco IOS=12.2ey

Cisco IOS=12.2seg

Cisco IOS=12.2xb

Cisco IOS=12.2yf

Cisco IOS=12.2sg

Cisco IOS=12.2ixf

Cisco IOS=12.2xl

Cisco IOS=12.2ym

Cisco IOS=12.3t

Cisco IOS=12.2yb

Cisco IOS=12.3

Cisco IOS=12.2dd

Cisco IOS=12.2zh

Cisco IOS=12.1yf

Cisco IOS=12.2yv

Cisco IOS=12.2ixa

Cisco IOS=12.2sxb

Cisco IOS=12.2xw

Cisco IOS=12.4xf

Cisco IOS=12.3va

Cisco IOS=12.2t

Cisco IOS=12.2zya

Cisco IOS=12.4ya

Cisco IOS=12.2yl

Cisco IOS=12.2sed

Cisco IOS=12.2ye

Cisco IOS=12.1yb

Cisco IOS=12.4xv

Cisco IOS=12.3yd

Cisco IOS=12.4xw

Cisco IOS=12.2ex

Cisco IOS=12.4xz

Cisco IOS=12.2sbc

Cisco IOS=12.2ixc

Cisco IOS=12.1ex

Cisco IOS=12.1yi

Cisco IOS=12.2ira

Cisco IOS=12.3xf

Cisco IOS=12.3xl

Cisco IOS=12.2se

Cisco IOS=12.1

Cisco IOS=12.3yk

Cisco IOS=12.2sxh

Cisco IOS=12.4xd

Cisco IOS=12.2sec

Cisco IOS=12.2xm

Cisco IOS=12.3yt

Cisco IOS=12.2xk

Cisco IOS=12.1xh

Cisco IOS=12.2ixg

Cisco IOS=12.2zj

Cisco IOS=12.3yz

Cisco IOS=12.4xk

Cisco IOS=12.2zy

Cisco IOS=12.3yg

Cisco IOS=12.1xj

Cisco IOS=12.2zd

Cisco IOS=12.3xc

Cisco IOS=12.4

Cisco IOS=12.2tpc

Cisco IOS=12.3xe

Cisco IOS=12.2yc

Cisco IOS=12.3tpc

Cisco IOS=12.2bw

Cisco IOS=12.4xa

Cisco IOS=12.2yu

Cisco IOS=12.2sxi

Cisco IOS=12.4xe

Cisco IOS=12.2ixd

Cisco IOS=12.2xd

Cisco IOS=12.3xq

Cisco IOS=12.2zl

Cisco IOS=12.2yq

Cisco IOS=12.2xq

Cisco IOS=12.2sef

Cisco IOS=12.2see

Cisco IOS=12.3jk

Cisco IOS=12.3b

Cisco IOS=12.4yb

Cisco IOS=12.2sra

Cisco IOS=12.2irb

Cisco IOS=12.3yh

Cisco IOS=12.2ya

Cisco IOS=12.2xv

Cisco IOS=12.2

Cisco IOS=12.3xx

Cisco IOS=12.4xy

Cisco IOS=12.3xa

Cisco IOS=12.3yi

Cisco IOS=12.2sxd

Cisco IOS=12.2src

Cisco IOS=12.2yz

Cisco IOS=12.2xa

Cisco IOS=12.2ixe

Cisco IOS=12.3xk

Cisco IOS=12.2yx

Cisco IOS=12.2xo

Cisco IOS=12.2sxe

Cisco IOS=12.2yh

Cisco IOS=12.2s

Cisco IOS=12.2fz

Cisco IOS=12.2xt

Event History

Sep 28, 2009

CVE Published

via MITRE·06:20 PM

Data Sourced

via MITRE·06:20 PM

Description

Frequently Asked Questions

What is the severity of CVE-2009-2863?

CVE-2009-2863 is rated as a critical vulnerability that allows remote attackers to bypass authentication.

How do I fix CVE-2009-2863?

To fix CVE-2009-2863, it is recommended to upgrade to a Cisco IOS version that has addressed this vulnerability.

What versions of Cisco IOS are affected by CVE-2009-2863?

CVE-2009-2863 affects Cisco IOS versions 12.0 through 12.4, including specific sub-versions.

What is the exploit method for CVE-2009-2863?

Attackers can exploit CVE-2009-2863 by sending a crafted request that bypasses authentication or consent pages.

Are there any workarounds for CVE-2009-2863?

As a workaround for CVE-2009-2863, implement access controls and monitoring to help mitigate unauthorized access.