Description
Cisco 12000 with IOS 12.0 and line cards based on Engine 2 does not block non-initial packet fragments, which allows remote attackers to bypass the ACL.
References
- M-018 third-party-advisory government-resource
- 20011114 Multiple Vulnerabilities in Access Control List Implementation for Cisco 12000 Series Internet Router vendor-advisory
- 1985 vdb-entry
- 3535 vdb-entry
- cisco-acl-noninital-dos(7550) vdb-entry