Back to search
CVE-2001-0537
Published: Mar 9, 2002
Modified: Aug 8, 2024
PUBLISHED
Description
HTTP server for Cisco IOS 11.3 to 12.2 allows attackers to bypass authentication and execute arbitrary commands, when local authorization is being used, by specifying a high access level in the URL.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
CA-2001-14
third-party-advisory
x_refsource_CERT
20010629 Re: Cisco Security Advisory: IOS HTTP authorization vulnerability
mailing-list
x_refsource_BUGTRAQ
20010627 IOS HTTP authorization vulnerability
vendor-advisory
x_refsource_CISCO
20010702 ios-http-auth.sh
mailing-list
x_refsource_BUGTRAQ
20010702 Cisco IOS HTTP Configuration Exploit
mailing-list
x_refsource_BUGTRAQ
578
vdb-entry
x_refsource_OSVDB
20010702 Cisco device HTTP exploit...
mailing-list
x_refsource_BUGTRAQ
L-106
third-party-advisory
government-resource
x_refsource_CIAC
2936
vdb-entry
x_refsource_BID
cisco-ios-admin-access(6749)
vdb-entry
x_refsource_XF
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now