critical10.0
CVE-2007-1257
The Network Analysis Module (NAM) in Cisco Catalyst Series 6000, 6500, and 7600 allows remote attackers to execute arbitrary commands via certain SNMP packets …
Impact
The Network Analysis Module (NAM) in Cisco Catalyst Series 6000, 6500, and 7600 allows remote attackers to execute arbitrary commands via certain SNMP packets that are spoofed from the NAM's own IP address.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cisco | Network Analysis Module | All versions |
| Cisco | Catalyst 6000 Ws-Svc-Nam-1 | Version 2.2\(1a\) |
| Cisco | Catalyst 6000 Ws-Svc-Nam-2 | Version 2.2\(1a\) |
| Cisco | Catalyst 6000 Ws-X6380-Nam | Version 3.1\(1a\) |
| Cisco | Catalyst 6500 Ws-Svc-Nam-1 | Version 2.2\(1a\) |
| Cisco | Catalyst 6500 Ws-Svc-Nam-2 | Version 2.2\(1a\) |
| Cisco | Catalyst 6500 Ws-X6380-Nam | Version 3.1\(1a\) |
| Cisco | Catalyst 7600 Ws-Svc-Nam-1 | Version 2.2\(1a\) |
| Cisco | Catalyst 7600 Ws-Svc-Nam-2 | Version 2.2\(1a\) |
| Cisco | Catalyst 7600 Ws-X6380-Nam | Version 3.1\(1a\) |
Weakness classification
References
- NVD record
- CVE.org record
- http://osvdb.org/33066
- http://secunia.com/advisories/24344
- http://www.cisco.com/warp/public/707/cisco-sa-20070228-nam.shtml
- http://www.kb.cert.org/vuls/id/472412
- http://www.securityfocus.com/bid/22751
- http://www.securitytracker.com/id?1017710
- http://www.vupen.com/english/advisories/2007/0783
- https://exchange.xforce.ibmcloud.com/vulnerabilities/32750
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5188
- http://osvdb.org/33066
- http://secunia.com/advisories/24344
- http://www.cisco.com/warp/public/707/cisco-sa-20070228-nam.shtml
- http://www.kb.cert.org/vuls/id/472412
- http://www.securityfocus.com/bid/22751
- http://www.securitytracker.com/id?1017710
- http://www.vupen.com/english/advisories/2007/0783
- https://exchange.xforce.ibmcloud.com/vulnerabilities/32750
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5188