Description
Cisco 12000 with IOS 12.0 and lines card based on Engine 2 does not properly handle an outbound ACL when an input ACL is not configured on all the interfaces of a multi port line card, which could allow remote attackers to bypass the intended access controls.
References
- M-018 third-party-advisory government-resource
- 20011114 Multiple Vulnerabilities in Access Control List Implementation for Cisco 12000 Series Internet Router vendor-advisory
- cisco-input-acl-configured(7554) vdb-entry
- 3537 vdb-entry
- 1984 vdb-entry