NVD

Id
63283  
Name
CVE-2006-4650  
Description
Cisco IOS 12.0, 12.1, and 12.2, when GRE IP tunneling is used and the RFC2784 compliance fixes are missing, does not verify the offset field of a GRE packet during decapsulation, which leads to an integer overflow that references data from incorrect memory locations, which allows remote attackers to inject crafted packets into the routing queue, possibly bypassing intended router ACLs.  
Reject
 
CVSS Version
2  
CVSS Score
2.6  
Severity
Low  
CVSS Base Score
2.6  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:P/I:N/A:N)  
Pub Date
2016-12-20  
Published
2006-09-08  
Modified Date
2011-03-07  
Seq
2006-4650  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
329743 63283 CVE-2006-4650 oval:org.mitre.oval:def:5713  View
329744 63283 CVE-2006-4650 1526  View
329745 63283 CVE-2006-4650 1016799  View
329746 63283 CVE-2006-4650 20060906 Cisco IOS GRE Decapsulation Vulnerability  View
329747 63283 CVE-2006-4650 http://www.phenoelit.de/stuff/CiscoGRE.txt  View
329748 63283 CVE-2006-4650 20060906 Cisco IOS GRE issue  View
329749 63283 CVE-2006-4650 19878  View
329750 63283 CVE-2006-4650 ADV-2006-3502  View
329751 63283 CVE-2006-4650 cisco-ios-gre-acl-bypass(28786)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
58339 JVNDB-2006-000535 Cisco IOS の不正な GRE パケットによるアクセス制御を回避される脆弱性 Cisco IOS には、ソースルーティング情報を含む GRE パケットの Offset フィールドに対するチェックが不適切であるため、カプセル化されたパケットを解除する際、ソースルーティング情報の開始位置が適切に計算されない脆弱性が存在します。 CVE-2006-4650 20752 CVE-2006-4650 63283 2.6 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000535.html 2006-09-06 2007-04-01 View