CVE-2000-0268

Cisco IOS 11.x and 12.x allows remote attackers to cause a denial of service by sending the ENVIRON option to the Telnet daemon before it is ready to accept it, which causes the system to reboot.

CVSS v2.0 5.0 MEDIUM

5.0^/10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact PARTIAL

References

Link	Resource
http://www.cisco.com/warp/public/707/iostelnetopt-pub.shtml	Patch Vendor Advisory
http://www.osvdb.org/1289
http://www.securityfocus.com/bid/1123

Configurations

Configuration 1 (hide)

AND

OR	cpe:2.3:o:cisco:ios:11.3aa:::::::*
	cpe:2.3:o:cisco:ios:12.0\(2\):::::::*
	cpe:2.3:o:cisco:ios:12.0\(2\)xc:::::::*
	cpe:2.3:o:cisco:ios:12.0\(2\)xd:::::::*
	cpe:2.3:o:cisco:ios:12.0\(2\)xf:::::::*
	cpe:2.3:o:cisco:ios:12.0\(2\)xg:::::::*
	cpe:2.3:o:cisco:ios:12.0\(3\)t2:::::::*
	cpe:2.3:o:cisco:ios:12.0\(4\):::::::*
	cpe:2.3:o:cisco:ios:12.0\(4\)s:::::::*
	cpe:2.3:o:cisco:ios:12.0\(4\)t:::::::*
	cpe:2.3:o:cisco:ios:12.0\(5\):::::::*
	cpe:2.3:o:cisco:ios:12.0\(6\):::::::*
	cpe:2.3:o:cisco:ios:12.0\(7\)t:::::::*

OR	cpe:2.3:a:cisco:accesspath:ls-3:::::::*
	cpe:2.3:a:cisco:accesspath:ts-3:::::::*
	cpe:2.3:a:cisco:accesspath:vs-3:::::::*
	cpe:2.3:a:cisco:as5200::::::::
	cpe:2.3:a:cisco:as5300::::::::
	cpe:2.3:a:cisco:as5800::::::::
	cpe:2.3:a:cisco:system_controller_3640::::::::
	cpe:2.3:h:cisco:voice_gateway_as5800::::::::

Configuration 2 (hide)

OR	cpe:2.3:h:cisco:3660_router::::::::
	cpe:2.3:h:cisco:7100_router::::::::
	cpe:2.3:h:cisco:7200_router::::::::
	cpe:2.3:h:cisco:7500_router::::::::
	cpe:2.3:h:cisco:ubr7200::::::::

History

No history.

Information

Published : 2000-04-20 04:00

Updated : 2008-09-10 19:03

NVD link : CVE-2000-0268

Mitre link : CVE-2000-0268

CVE.ORG link : CVE-2000-0268

JSON object : View

Products Affected

cisco

system_controller_3640
7100_router
as5800
3660_router
7500_router
accesspath
ios
as5200
7200_router
voice_gateway_as5800
ubr7200
as5300

CWE

NVD-CWE-Other

{"id": "CVE-2000-0268", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2000-04-20T04:00:00.000", "references": [{"url": "http://www.cisco.com/warp/public/707/iostelnetopt-pub.shtml", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.osvdb.org/1289", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/1123", "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Cisco IOS 11.x and 12.x allows remote attackers to cause a denial of service by sending the ENVIRON option to the Telnet daemon before it is ready to accept it, which causes the system to reboot."}], "lastModified": "2008-09-10T19:03:47.867", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:cisco:ios:11.3aa:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D8783C0A-990A-4B79-8BF9-64E425DA585E"}, {"criteria": "cpe:2.3:o:cisco:ios:12.0\\(2\\):*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "77DDC99D-8B73-452C-94A7-A9A48F2F379B"}, {"criteria": "cpe:2.3:o:cisco:ios:12.0\\(2\\)xc:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5145C737-2D5E-4BD4-BA9F-66ED2887A4DB"}, {"criteria": "cpe:2.3:o:cisco:ios:12.0\\(2\\)xd:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C48466C4-5A1E-4C71-8822-32D387B36B8B"}, {"criteria": "cpe:2.3:o:cisco:ios:12.0\\(2\\)xf:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "08E23131-D207-4D98-96D5-2B71FF792604"}, {"criteria": "cpe:2.3:o:cisco:ios:12.0\\(2\\)xg:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1BFB5A8C-BF1B-4111-9E6A-F8D8FE1476AA"}, {"criteria": "cpe:2.3:o:cisco:ios:12.0\\(3\\)t2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E7109585-1433-4940-B7C9-C561DEAF1498"}, {"criteria": "cpe:2.3:o:cisco:ios:12.0\\(4\\):*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1A0D82E1-CCF7-429B-A637-479E839EAE3C"}, {"criteria": "cpe:2.3:o:cisco:ios:12.0\\(4\\)s:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E9D1F7A6-6DB3-41D1-BD87-DE1898EC91A9"}, {"criteria": "cpe:2.3:o:cisco:ios:12.0\\(4\\)t:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4F1B2747-4A9C-44FC-BBA8-39E338B30417"}, {"criteria": "cpe:2.3:o:cisco:ios:12.0\\(5\\):*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D5BB7513-C232-4B4F-BE68-972B05086ABD"}, {"criteria": "cpe:2.3:o:cisco:ios:12.0\\(6\\):*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "ECCE69A3-41C6-4893-86D4-7F264352C8A9"}, {"criteria": "cpe:2.3:o:cisco:ios:12.0\\(7\\)t:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FA654CE6-82C3-43D0-BAED-70E88A740BF1"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:cisco:accesspath:ls-3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7D8CD3D5-C52F-4B38-8DA7-5441B7CD000D"}, {"criteria": "cpe:2.3:a:cisco:accesspath:ts-3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1DD96A21-1862-4E35-BD02-2928DD44B3C1"}, {"criteria": "cpe:2.3:a:cisco:accesspath:vs-3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D537F5F7-8227-46CC-A30F-B81C25AD9FA3"}, {"criteria": "cpe:2.3:a:cisco:as5200:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6E74902A-1785-40FE-92A0-55BD27D6FEC3"}, {"criteria": "cpe:2.3:a:cisco:as5300:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "883975E5-FE8B-4DC4-8F71-E68791ABD17D"}, {"criteria": "cpe:2.3:a:cisco:as5800:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "823E4E18-8719-4167-83BE-CF2DA55558E9"}, {"criteria": "cpe:2.3:a:cisco:system_controller_3640:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B7C0CC3E-3E01-4607-BE75-4A6A1074DC82"}, {"criteria": "cpe:2.3:h:cisco:voice_gateway_as5800:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9D185F2F-788C-44F1-A635-90E33A4A88B9"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:cisco:3660_router:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5EAE468C-7D0F-4F6D-B598-B2E422EFDCD5"}, {"criteria": "cpe:2.3:h:cisco:7100_router:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C3715102-E348-457A-9546-94BBCEF91A00"}, {"criteria": "cpe:2.3:h:cisco:7200_router:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "60DEA083-B9BC-42DB-A4F7-986A5A185DE6"}, {"criteria": "cpe:2.3:h:cisco:7500_router:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FCFAA111-F831-4BC9-BCD7-246ED6C0F3FF"}, {"criteria": "cpe:2.3:h:cisco:ubr7200:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0B4917DF-B485-46A3-9515-8BDDD1F13C77"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}

5.0 /10