National Vulnerability Database (CVE-2000-0945)

National Cyber-Alert System Vulnerability Summary: CVE-2000-0945
Orirignal release date: 2000-12-19 Source: US-CERT/NIST ### Overview The web configuration interface for Catalyst 3500 XL switches allows remote attackers to execute arbitrary commands without authentication when the enable password is not set, via a URL containing the /exec/ directory. ### Impact CVSS Severity: 10 (High) Range: remote Authentication: input Impact Type: conf,sec_prot admin="1" ### Reference to Advisories, Solutions, and Tools External Source: ISS X-Force Name: XF:cisco-catalyst-remote-commands Hyperlink: http://xforce.iss.net/static/5415.php External Source: Neohapsis Name: BUGTRAQ:20001026 Advisory def-2000-02: Cisco Catalyst remote command execution Hyperlink: http://archives.neohapsis.com/archives/bugtraq/2000-10/0380.html External Source: Security Focus Name: BID 1846 Hyperlink: http://www.securityfocus.com/bid/1846 ### Vulnerable Software and Vendor Catalyst 3500 (Cisco) Technical Details CVE Standard Vulnerability Entry: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2000-0945