Description
A "logic error" in Cisco IOS 12.0 through 12.4, when a Multiprotocol Label Switching (MPLS) VPN with extended communities is configured, sometimes causes a corrupted route target (RT) to be used, which allows remote attackers to read traffic from other VPNs in opportunistic circumstances.
References
- 31990 third-party-advisory
- 31366 vdb-entry
- oval:org.mitre.oval:def:5919 vdb-entry signature
- 1020940 vdb-entry
- ADV-2008-2670 vdb-entry
- 20080924 Cisco IOS MPLS VPN May Leak Information vendor-advisory