CVE-2007-4285 Unspecified vulnerability in Cisco IOS and Cisco IOS XR 12.x up to 12.3, including some versions before 12.3(15) and 12.3(14)T, allows remote attackers to obtain sensitive information (partial packet....
HighCVSS 9.0
EPSS 2.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unspecified vulnerability in Cisco IOS and Cisco IOS XR 12.x up to 12.3, including some versions before 12.3(15) and 12.3(14)T, allows remote attackers to obtain sensitive information (partial packet contents) or cause a denial of service (router or component crash) via crafted IPv6 packets with a Type 0 routing header.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco ios | = 12.0 | No fix listed |
| cisco ios | = 12.1 | No fix listed |
| cisco ios | = 12.2 | No fix listed |
| cisco ios | = 12.3 | No fix listed |
References
- 26359 third-party-advisory vendor-advisory
- 20070808 Cisco IOS Information Leakage Using IPv6 Routing Header patch vendor-advisory
- 1018542 vdb-entry
- ADV-2007-2819 vdb-entry vendor-advisory
- cisco-ios-ipv6-header-dos(35906) vdb-entry
- oval:org.mitre.oval:def:5840 signature vdb-entry