CVE-2007-5134 Cisco Catalyst 6500 and Cisco 7600 series devices use 127/8 IP addresses for Ethernet Out-of-Band Channel (EOBC) internal communication, which might allow remote attackers to send packets to an interf...
MediumCVSS 5.0
EPSS 2.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cisco Catalyst 6500 and Cisco 7600 series devices use 127/8 IP addresses for Ethernet Out-of-Band Channel (EOBC) internal communication, which might allow remote attackers to send packets to an interface for which network exposure was unintended.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco catalyst 6500 | All versions | No fix listed |
| cisco catalyst 6500 ws-svc-nam-1 | = 2.2(1a) | No fix listed |
| cisco catalyst 6500 ws-svc-nam-1 | = 3.1(1a) | No fix listed |
| cisco catalyst 6500 ws-svc-nam-2 | = 2.2(1a) | No fix listed |
| cisco catalyst 6500 ws-svc-nam-2 | = 3.1(1a) | No fix listed |
| cisco catalyst 6500 ws-x6380-nam | = 2.1(2) | No fix listed |
| cisco catalyst 6500 ws-x6380-nam | = 3.1(1a) | No fix listed |
| cisco catalyst 7600 | All versions | No fix listed |
| cisco catalyst 7600 ws-svc-nam-1 | = 2.2(1a) | No fix listed |
| cisco catalyst 7600 ws-svc-nam-1 | = 3.1(1a) | No fix listed |
| cisco catalyst 7600 ws-svc-nam-2 | = 2.2(1a) | No fix listed |
| cisco catalyst 7600 ws-svc-nam-2 | = 3.1(1a) | No fix listed |
| cisco catalyst 7600 ws-x6380-nam | = 2.1(2) | No fix listed |
| cisco catalyst 7600 ws-x6380-nam | = 3.1(1a) | No fix listed |
| cisco catos | = 5.4(1) | No fix listed |
| cisco catos | = 7.5(1) | No fix listed |
| cisco catos | = 7.6(1) | No fix listed |
References
- 20070927 Re: CAT6500 accessible via 127.0.0.x loopback addresses mailing-list
- 26988 third-party-advisory
- 1018742 vdb-entry
- 20070926 Catalyst 6500 and Cisco 7600 Series Devices Accessible via Loopback Address patch vendor-advisory
- 25822 exploit vdb-entry
- 1018743 vdb-entry
- ADV-2007-3276 vdb-entry
- cisco-catalyst-loopback-acl-bypass(36826) vdb-entry