Description
Race condition in the Firewall Authentication Proxy feature in Cisco IOS 12.0 through 12.4 allows remote attackers to bypass authentication, or bypass the consent web page, via a crafted request, aka Bug ID CSCsy15227.
References
- 36491 vdb-entry
- 1022935 vdb-entry
- ciscoios-authenticationproxy-sec-bypass(53453) vdb-entry
- http://tools.cisco.com/security/center/viewAlert.x?alertId=18882
- 58340 vdb-entry
- 20090923 Cisco IOS Software Authentication Proxy Vulnerability vendor-advisory