5.1

CVE-2008-1156

Unspecified vulnerability in the Multicast Virtual Private Network (MVPN) implementation in Cisco IOS 12.0, 12.2, 12.3, and 12.4 allows remote attackers to create "extra multicast states on the core routers" via a crafted Multicast Distribution Tree (MDT) Data Join message.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Cisco ≫ Cisco Ios Version12.3
Cisco ≫ Cisco Ios Version12.4
Cisco ≫ Ios Version12.0
Cisco ≫ Ios Version12.2
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.71% 0.84
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5.1 4.9 6.4
AV:N/AC:H/Au:N/C:P/I:P/A:P
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

http://www.us-cert.gov/cas/techalerts/TA08-087B.html
US Government Resource
http://secunia.com/advisories/29507
http://www.vupen.com/english/advisories/2008/1006/references
http://www.cisco.com/warp/public/707/cisco-sa-20080326-mvpn.shtml
Patch
http://www.securityfocus.com/bid/28464
http://www.securitytracker.com/id?1019715
https://exchange.xforce.ibmcloud.com/vulnerabilities/41468
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5648