Description
The Network Analysis Module (NAM) in Cisco Catalyst Series 6000, 6500, and 7600 allows remote attackers to execute arbitrary commands via certain SNMP packets that are spoofed from the NAM's own IP address.
Affected products
- Cisco / catalyst_6000_ws-svc-nam-12.2(1a) – 2.2(1a)
- Cisco / catalyst_6000_ws-svc-nam-22.2(1a) – 2.2(1a)
- Cisco / catalyst_6000_ws-x6380-nam3.1(1a) – 3.1(1a)
- Cisco / catalyst_6500_ws-svc-nam-12.2(1a) – 2.2(1a)
- Cisco / catalyst_6500_ws-svc-nam-22.2(1a) – 2.2(1a)
- Cisco / catalyst_6500_ws-x6380-nam3.1(1a) – 3.1(1a)
- Cisco / catalyst_7600_ws-svc-nam-12.2(1a) – 2.2(1a)
- Cisco / catalyst_7600_ws-svc-nam-22.2(1a) – 2.2(1a)
- Cisco / catalyst_7600_ws-x6380-nam3.1(1a) – 3.1(1a)
- Cisco / network_analysis_module
References
- VENDOR_ADVISORYhttp://www.cisco.com/warp/public/707/cisco-sa-20070228-nam.shtml
- MISChttp://www.kb.cert.org/vuls/id/472412
- VENDOR_ADVISORYhttp://www.vupen.com/english/advisories/2007/0783
- VENDOR_ADVISORYhttp://secunia.com/advisories/24344
- MISChttp://www.securityfocus.com/bid/22751
- MISChttp://osvdb.org/33066
- MISChttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5188
- MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/32750
- MISChttp://www.securitytracker.com/id?1017710