CVE-2008-3803

 

Published at: - 26-09-2008 06:21

Last modified: - 02-06-2022 07:16

Total changes: - 2

Description

A "logic error" in Cisco IOS 12.0 through 12.4, when a Multiprotocol Label Switching (MPLS) VPN with extended communities is configured, sometimes causes a corrupted route target (RT) to be used, which allows remote attackers to read traffic from other VPNs in opportunistic circumstances.

Common Vulnerability Scoring System (CVSS)

AV:N/AC:H/Au:N/C:P/I:P/A:P

 

Verification logic

 

Reference

• 20080924 Cisco IOS MPLS VPN May Leak Information-Vendor Advisory
• 31990-Third Party Advisory
• 31366-Third Party Advisory, VDB Entry
• ADV-2008-2670-Permissions Required
• 1020940-Broken Link, Third Party Advisory, VDB Entry
• oval:org.mitre.oval:def:5919-Third Party Advisory

 

Keywords

NVD

 

CVE-2008-3803

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures