Cisco IOS HTTP Authorization Vulnerability

Reported June 27, 2001, by CiscoSystems.

VERSIONS AFFECTED

AllCisco Products using the Internetwork Operating System release 11.3 or later,including (but not limited to):

DESCRIPTION
Avulnerability exists in Cisco’s Internetwork Operating System HTTP server thatlets an unauthorized user bypass authentication and exercise complete controlover the device by sending a crafted URL. An attacker can exploit thisvulnerability only by using a local database for authentication (with usernamesand passwords being defined on the device itself). Although using the same URLwould not be effective against every Cisco Internet Operating System softwareand hardware combination, 84 different combinations are possible.

VENDOR RESPONSE

Ciscohas issued a noticeregarding this vulnerability. To work around this problem, users can disable the HTTP server on the router, or use another authentication method (e.g., RADIUS). The company recommends that users obtain a firmware upgrade through the Software Center on Cisco's Website or through Cisco's distribution channels.

CREDIT
Discovered by Cisco Systems.