|
Family: CISCO --> Category: infos
CSCdv48261 Vulnerability Scan
Vulnerability Scan Summary Uses SNMP to determine if a flaw is present
Detailed Explanation for this Vulnerability Test
The IOS Firewall Feature set, also known as Cisco Secure Integrated
Software, also known as Context Based Access Control (CBAC), and
introduced in IOS version 11.2P, has a vulnerability that permits
traffic normally expected to be denied by the dynamic access control
lists.
A possible hacker may use this flaw to break into your network even though
it was explicitly denied
This vulnerability is documented as Cisco Bug ID CSCdv48261.
Solution :
http://www.cisco.com/warp/public/707/IOS-cbac-dynacl-pub.shtml
Reference : http://online.securityfocus.com/archive/1/242844
Threat Level: Critical
*** As Nessus solely relied on the banner of the remote host
*** this might be a false positive
Click HERE for more information and discussions on this network vulnerability scan.
|