critical10.0Public exploit code
CVE-2000-0945
The web configuration interface for Catalyst 3500 XL switches allows remote attackers to execute arbitrary commands without authentication when the enable pass…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Cisco Catalyst 3500 XL - Arbitrary Command Execution2000-10-26 · remote · hardware · Verified
Impact
The web configuration interface for Catalyst 3500 XL switches allows remote attackers to execute arbitrary commands without authentication when the enable password is not set, via a URL containing the /exec/ directory.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cisco | Catalyst 3500 Xl | All versions |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2000-10/0380.html
- http://archives.neohapsis.com/archives/bugtraq/2000-11/0194.html
- http://www.osvdb.org/444
- http://www.securityfocus.com/bid/1846
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5415
- http://archives.neohapsis.com/archives/bugtraq/2000-10/0380.html
- http://archives.neohapsis.com/archives/bugtraq/2000-11/0194.html
- http://www.osvdb.org/444
- http://www.securityfocus.com/bid/1846
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5415