CVE - CVE-2001-0537

CVE-ID
CVE-2001-0537	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
HTTP server for Cisco IOS 11.3 to 12.2 allows attackers to bypass authentication and execute arbitrary commands, when local authorization is being used, by specifying a high access level in the URL.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
BID:2936 URL:http://www.securityfocus.com/bid/2936 BUGTRAQ:20010629 Re: Cisco Security Advisory: IOS HTTP authorization vulnerability URL:http://www.securityfocus.com/archive/1/4.3.2.7.2.20010629095801.0c3e6a70@brussels.cisco.com BUGTRAQ:20010702 Cisco IOS HTTP Configuration Exploit URL:http://www.securityfocus.com/archive/1/1601227034.20010702112207@olympos.org BUGTRAQ:20010702 Cisco device HTTP exploit... URL:http://www.securityfocus.com/archive/1/Pine.LNX.3.96.1010702134611.22995B-100000@Lib-Vai.lib.asu.edu BUGTRAQ:20010702 ios-http-auth.sh URL:http://www.securityfocus.com/archive/1/20010703011650.60515.qmail@web14910.mail.yahoo.com CERT:CA-2001-14 URL:http://www.cert.org/advisories/CA-2001-14.html CIAC:L-106 URL:http://www.ciac.org/ciac/bulletins/l-106.shtml CISCO:20010627 IOS HTTP authorization vulnerability URL:http://www.cisco.com/warp/public/707/IOS-httplevel-pub.html OSVDB:578 URL:~~http://www.osvdb.org/578~~ (Obsolete source) XF:cisco-ios-admin-access(6749) URL:https://exchange.xforce.ibmcloud.com/vulnerabilities/6749
Date Record Created
20020309	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)