Description
Cisco 12000 with IOS 12.0 and line cards based on Engine 2 does not support the "fragment" keyword in an outgoing ACL, which could allow fragmented packets in violation of the intended access.
References
- M-018 third-party-advisory government-resource
- 20011114 Multiple Vulnerabilities in Access Control List Implementation for Cisco 12000 Series Internet Router vendor-advisory
- 3540 vdb-entry
- cisco-turbo-acl-dos(7552) vdb-entry
- 1988 vdb-entry