exploits , vulnerabilities , articles , Cisco IOS Authentication Proxy for HTTP(S) Authentication Bypass Vulnerability

Title	Cisco IOS Authentication Proxy for HTTP(S) Authentication Bypass Vulnerability
Published	2009-09-23-12:00AM
Updated	2009-09-23-05:00PM
Class	Race Condition Error
CVE	CVE-2009-2863
Remote	Yes
Local	No
Credit	The vendor
Vulnerable	Cisco IOS 12.4YB Cisco IOS 12.4YA Cisco IOS 12.4XZ Cisco IOS 12.4XY Cisco IOS 12.4XW Cisco IOS 12.4XV Cisco IOS 12.4XT Cisco IOS 12.4XK Cisco IOS 12.4XJ Cisco IOS 12.4XF Cisco IOS 12.4XE Cisco IOS 12.4XD Cisco IOS 12.4XC Cisco IOS 12.4XA Cisco IOS 12.4T Cisco IOS 12.4MR Cisco IOS 12.4 Cisco IOS 12.3ZA Cisco IOS 12.3YZ Cisco IOS 12.3YT Cisco IOS 12.3YS Cisco IOS 12.3YM Cisco IOS 12.3YK Cisco IOS 12.3YI Cisco IOS 12.3YH Cisco IOS 12.3YG Cisco IOS 12.3YD Cisco IOS 12.3YA Cisco IOS 12.3XX Cisco IOS 12.3XS Cisco IOS 12.3XR Cisco IOS 12.3XQ Cisco IOS 12.3XL Cisco IOS 12.3XK Cisco IOS 12.3XG Cisco IOS 12.3XF Cisco IOS 12.3XE Cisco IOS 12.3XD Cisco IOS 12.3XC Cisco IOS 12.3XA Cisco IOS 12.3VA Cisco IOS 12.3TPC Cisco IOS 12.3T Cisco IOS 12.3JK Cisco IOS 12.3B Cisco IOS 12.3 Cisco IOS 12.2ZYA Cisco IOS 12.2ZY Cisco IOS 12.2ZU Cisco IOS 12.2ZL Cisco IOS 12.2ZJ Cisco IOS 12.2ZH Cisco IOS 12.2ZG Cisco IOS 12.2ZF Cisco IOS 12.2ZE Cisco IOS 12.2ZD Cisco IOS 12.2YZ Cisco IOS 12.2YX Cisco IOS 12.2YV Cisco IOS 12.2YU Cisco IOS 12.2YR Cisco IOS 12.2YQ Cisco IOS 12.2YO Cisco IOS 12.2YN Cisco IOS 12.2YM Cisco IOS 12.2YL Cisco IOS 12.2YJ Cisco IOS 12.2YH Cisco IOS 12.2YF Cisco IOS 12.2YE Cisco IOS 12.2YC Cisco IOS 12.2YB Cisco IOS 12.2YA Cisco IOS 12.2XW Cisco IOS 12.2XV Cisco IOS 12.2XT Cisco IOS 12.2XQ Cisco IOS 12.2XO Cisco IOS 12.2XM Cisco IOS 12.2XL Cisco IOS 12.2XK Cisco IOS 12.2XJ Cisco IOS 12.2XH Cisco IOS 12.2XG Cisco IOS 12.2XD Cisco IOS 12.2XB Cisco IOS 12.2XA Cisco IOS 12.2TPC Cisco IOS 12.2T Cisco IOS 12.2SZ Cisco IOS 12.2SXI Cisco IOS 12.2SXH Cisco IOS 12.2SXF Cisco IOS 12.2SXE Cisco IOS 12.2SXE Cisco IOS 12.2SXD Cisco IOS 12.2SXD Cisco IOS 12.2SXB Cisco IOS 12.2SXA Cisco IOS 12.2SX Cisco IOS 12.2SW Cisco IOS 12.2SV Cisco IOS 12.2SU Cisco IOS 12.2SRD Cisco IOS 12.2SRC Cisco IOS 12.2SRB Cisco IOS 12.2SRA Cisco IOS 12.2SQ Cisco IOS 12.2SGA Cisco IOS 12.2SG Cisco IOS 12.2SG Cisco IOS 12.2SEG Cisco IOS 12.2SEG Cisco IOS 12.2SEG Cisco IOS 12.2SEF Cisco IOS 12.2SEF Cisco IOS 12.2SEE Cisco IOS 12.2SEE Cisco IOS 12.2SEE Cisco IOS 12.2SED Cisco IOS 12.2SED Cisco IOS 12.2SEC Cisco IOS 12.2SEC Cisco IOS 12.2SEB Cisco IOS 12.2SEA Cisco IOS 12.2SE Cisco IOS 12.2SE Cisco IOS 12.2SBC Cisco IOS 12.2SBC Cisco IOS 12.2SB Cisco IOS 12.2SB Cisco IOS 12.2S Cisco IOS 12.2S Cisco IOS 12.2IXH Cisco IOS 12.2IXG Cisco IOS 12.2IXF Cisco IOS 12.2IXE Cisco IOS 12.2IXD Cisco IOS 12.2IXC Cisco IOS 12.2IXB Cisco IOS 12.2IXA Cisco IOS 12.2IRC Cisco IOS 12.2IRB Cisco IOS 12.2IRA Cisco IOS 12.2FZ Cisco IOS 12.2FY Cisco IOS 12.2FX Cisco IOS 12.2EY Cisco IOS 12.2EY Cisco IOS 12.2EX Cisco IOS 12.2EX Cisco IOS 12.2EWA Cisco IOS 12.2EW Cisco IOS 12.2EU Cisco IOS 12.2DD Cisco IOS 12.2CZ Cisco IOS 12.2BW Cisco IOS 12.2B Cisco IOS 12.2(33)SXH5 Cisco IOS 12.2(33)SXH4 Cisco IOS 12.2(33)SXH3 Cisco IOS 12.2(18)SXF16 Cisco IOS 12.2(18)SXF15 Cisco IOS 12.2(18)SXF14 Cisco IOS 12.2(18)SXF13 Cisco IOS 12.2(18)SXF11 Cisco IOS 12.2 FZ Cisco IOS 12.2 Cisco IOS 12.1YI Cisco IOS 12.1YF Cisco IOS 12.1YE Cisco IOS 12.1YD Cisco IOS 12.1YB Cisco IOS 12.1XT Cisco IOS 12.1XR Cisco IOS 12.1XP Cisco IOS 12.1XM Cisco IOS 12.1XL Cisco IOS 12.1XJ Cisco IOS 12.1XI Cisco IOS 12.1XH Cisco IOS 12.1XC Cisco IOS 12.1T Cisco IOS 12.1EX Cisco IOS 12.1EA Cisco IOS 12.1E Cisco IOS 12.1DC Cisco IOS 12.1DB Cisco IOS 12.1AY Cisco IOS 12.1 Cisco IOS 12.0XR Cisco IOS 12.0XK Cisco IOS 12.0XE Cisco IOS 12.0WC Cisco IOS 12.0T Cisco IOS 12.0DC Cisco IOS 12.0DB
Not Vulnerable	Cisco IOS 12.4(25a) Cisco IOS 12.4(24)T1 Cisco IOS 12.4(23a) Cisco IOS 12.4(22)YB4 Cisco IOS 12.4(22)T2 Cisco IOS 12.4(20)T3 Cisco IOS 12.4(19)MR1 Cisco IOS 12.4(15)T9 Cisco IOS 12.3(8)JK1 Cisco IOS 12.3(2)XC4 Cisco IOS 12.3(2)JK3 Cisco IOS 12.2SB Cisco IOS 12.2(53)SG1 Cisco IOS 12.2(52)SE Cisco IOS 12.2(50)SG4 Cisco IOS 12.2(50)SE3 Cisco IOS 12.2(4)YA8 Cisco IOS 12.2(37)EY Cisco IOS 12.2(37)EX Cisco IOS 12.2(35)SE Cisco IOS 12.2(35)EX Cisco IOS 12.2(33)SXI2a Cisco IOS 12.2(33)SXI2 Cisco IOS 12.2(33)SXH6 Cisco IOS 12.2(33)SRD3 Cisco IOS 12.2(33)SRD2a Cisco IOS 12.2(33)SRC5 Cisco IOS 12.2(31)SGA11 Cisco IOS 12.2(31)SG Cisco IOS 12.2(31)SB Cisco IOS 12.2(30)S Cisco IOS 12.2(27)SBC3 Cisco IOS 12.2(25)SEG4 Cisco IOS 12.2(25)SEF2 Cisco IOS 12.2(25)EY4 Cisco IOS 12.2(2)XB1 Cisco IOS 12.2(2)B7 Cisco IOS 12.2(18)SXF17 Cisco IOS 12.2(18)SXE4 Cisco IOS 12.2(13)ZH6 Cisco IOS 12.2(11)YV1 Cisco IOS 12.2(1)XA Cisco IOS 12.1(8)EA1c Cisco IOS 12.1(6)EA1a Cisco IOS 12.1(5)YE6 Cisco IOS 12.1(5)YB Cisco IOS 12.1(4)DC2 Cisco IOS 12.1(4)DC Cisco IOS 12.1(4)DB1 Cisco IOS 12.1(3a)XL2 Cisco IOS 12.1(3)DB1 Cisco IOS 12.1(22)AY1 Cisco IOS 12.1(2)XT2 Cisco IOS 12.1(2)EX Cisco IOS 12.1(13)AY Cisco IOS 12.0(7)DC Cisco IOS 12.0(7)DB Cisco IOS 12.0(6)XR Cisco IOS 12.0(5)XE Cisco IOS 12.0(5)WC4 Cisco IOS 12.0(4)T1 Cisco IOS 12.0(4)DB Cisco IOS 12.0(3)DC1
Code	Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: content@securitydot.net.
TXT

Vulnerabilities - newest 10 RSS | More

2009-12-14 Microsoft Protected Extensible Authentication Protocol Authentication Bypass Vulnerability
2009-12-14 Google Chrome DNS Pre-Fetching Proxy Cache Information Disclosure Vulnerability
2009-12-14 Oracle E-Business Suite Multiple Remote Vulnerabilities
2009-12-14 MySQL Multiple Remote Denial Of Service Vulnerabilities
2009-12-14 Digital Scribe Multiple SQL Injection Vulnerabilities
2009-12-14 Microsoft WordPad and Office Text Converters Word 97 File Parsing Memory Corruption Vulnerability
2009-12-14 Microsoft Protected Extensible Authentication Protocol Memory Corruption Vulnerability
2009-12-14 WebKit Web Inspector Cross Site Scripting Vulnerability
2009-12-11 Symantec Veritas VRTSweb Incoming Data Remote Code Execution Vulnerability
2009-12-11 HP OpenView Network Node Manager Perl CGI Executables Remote Code Execution Vulnerability