NVD

Id
3666  
Name
CVE-2008-3803  
Description
A "logic error" in Cisco IOS 12.0 through 12.4, when a Multiprotocol Label Switching (MPLS) VPN with extended communities is configured, sometimes causes a corrupted route target (RT) to be used, which allows remote attackers to read traffic from other VPNs in opportunistic circumstances.  
Reject
 
CVSS Version
2  
CVSS Score
5.1  
Severity
Medium  
CVSS Base Score
5.1  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2008-09-26  
Modified Date
2012-10-29  
Seq
2008-3803  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
23144 3666 CVE-2008-3803 oval:org.mitre.oval:def:5919  View
23145 3666 CVE-2008-3803 20080924 Cisco IOS MPLS VPN May Leak Information  View
23146 3666 CVE-2008-3803 31366  View
23147 3666 CVE-2008-3803 1020940  View
23148 3666 CVE-2008-3803 ADV-2008-2670  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
46455 JVNDB-2008-001765 Cisco IOS の Multiprotocol Label Switching (MPLS) VPN における通信を読まれる脆弱性 Cisco IOS の Multiprotocol Label Switching (MPLS) VPN には、拡張コミュニティの設定がされている場合に route target (RT) が破壊され、他の VPN から通信を読まれる脆弱性が存在します。 CVE-2008-3803 33916 CVE-2008-3803 3666 5.1 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001765.html 2008-09-24 2008-10-23 View