CVE-2007-5549 - Unspecified vulnerability in Command EXEC in Cisco IOS allows local users to bypass command restrictions and obtain sensitive information via an unspecified "variation of an IOS command" involving "two different methods", aka CSCsk16129

Back Back to CVE browser

LOW

Unspecified vulnerability in Command EXEC in Cisco IOS allows local users to bypass command restrictions and obtain sensitive information via an unspecified "variation of an IOS command" involving "two different methods", aka CSCsk16129

Published Oct 18, 2007

2.1

LOW

CVSS 2.0

EPSS 0.37%

Description

Unspecified vulnerability in Command EXEC in Cisco IOS allows local users to bypass command restrictions and obtain sensitive information via an unspecified "variation of an IOS command" involving "two different methods", aka CSCsk16129. NOTE: as of 20071016, the only disclosure is a vague pre-advisory with no actionable information. However, since it is from a well-known researcher, it is being assigned a CVE identifier for tracking purposes.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-200

Exposure of Sensitive Information

References (3)

http://osvdb.org/45363
vdb-entryx_refsource_OSVDB
http://www.irmplc.com/index.php/111-Vendor-Alerts
x_refsource_MISC
https://euvd.enisa.europa.eu/vulnerability/EUVD-2007-5524
Advisory

Link	Providers	Tags
http://osvdb.org/45363		vdb-entryx_refsource_OSVDB
http://www.irmplc.com/index.php/111-Vendor-Alerts		x_refsource_MISC
https://euvd.enisa.europa.eu/vulnerability/EUVD-2007-5524		Advisory