Security Management White Papers
Cisco Security Advisory: IOS HTTP Authorization Vulnerability
Overview When the HTTP server is enabled and local authorization is used, it is possible, under some circumstances, to bypass the authentication and execute any command on the device. In that case, the user will be able to exercise complete control over the device. All commands will be executed with the highest privilege (level 15). All releases of Cisco IOS® software, starting with release 11.3 and later, are vulnerable. Virtually all mainstream Cisco routers and switches running Cisco IOS software are affected by this vulnerability. Products that are not running Cisco IOS software are not vulnerable. The workaround for this vulnerability is to disable HTTP server on the router or to use Terminal Access Controller Access Control System (TACACS+) or Radius for authentication.
| Publisher | Cisco | File Format | HTML & PDF |
|---|---|---|---|
| Date Published | June 2001 | Downloads | 9 |
| Format | White Papers | ||
| Topics | |||
-
Did you find this white paper useful? 2 out of 5 users found this white paper useful
White Paper RSS
Download
Register
