CVE-2000-0945

Description

The web configuration interface for Catalyst 3500 XL switches allows remote attackers to execute arbitrary commands without authentication when the enable password is not set, via a URL containing the /exec/ directory.

Affected products

• Cisco / catalyst_3500_xl

Exploits & proofs of concept

• exploit-dbCisco Catalyst 3500 XL - Arbitrary Command Executionby blackangels

References

• MISChttp://www.osvdb.org/444
• MISChttp://archives.neohapsis.com/archives/bugtraq/2000-11/0194.html
• MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/5415
• MISChttp://archives.neohapsis.com/archives/bugtraq/2000-10/0380.html
• MISChttp://www.securityfocus.com/bid/1846