CVE

Id
37906  
CVE No.
CVE-2009-0471  
Status
Candidate  
Description
Cross-site request forgery (CSRF) vulnerability in the HTTP server in Cisco IOS 12.4(23) allows remote attackers to execute arbitrary commands, as demonstrated by executing the hostname command with a level/15/configure/-/hostname request.  
Phase
Assigned (20090206)  
Votes
None (candidate not yet proposed)  
Comments