CVE-2003-1398 Cisco IOS 12.0 through 12.2, when IP routing is disabled, accepts false ICMP redirect messages, which allows remote attackers to cause a denial of service (network routing modification).
HighCVSS 9.3
EPSS 1.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cisco IOS 12.0 through 12.2, when IP routing is disabled, accepts false ICMP redirect messages, which allows remote attackers to cause a denial of service (network routing modification).
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco ios | = 12.0 | No fix listed |
| cisco ios | = 12.0s | No fix listed |
| cisco ios | = 12.0st | No fix listed |
| cisco ios | = 12.0t | No fix listed |
| cisco ios | = 12.1 | No fix listed |
| cisco ios | = 12.1e | No fix listed |
| cisco ios | = 12.1t | No fix listed |
| cisco ios | = 12.2 | No fix listed |
| cisco ios | = 12.2e | No fix listed |
| cisco ios | = 12.2f | No fix listed |
| cisco ios | = 12.2s | No fix listed |
| cisco ios | = 12.2t | No fix listed |
References
- 20030211 Field Notice - IOS Accepts ICMP Redirects in Non-default Configuration Settings mailing-list
- 1006075 vdb-entry
- 6823 vdb-entry
- cisco-ios-icmp-redirect(11306) vdb-entry