CVE-2009-0637
27.03.2009, 16:30
The SCP server in Cisco IOS 12.2 through 12.4, when Role-Based CLI Access is enabled, does not enforce the CLI view configuration for file transfers, which allows remote authenticated users with an attached CLI view to (1) read or (2) overwrite arbitrary files via an SCP command.Enginsight
| Vendor | Product | Version |
|---|---|---|
| cisco | ios | 12.2 |
| cisco | ios | 12.2b:b |
| cisco | ios | 12.2bc:bc |
| cisco | ios | 12.2bw:bw |
| cisco | ios | 12.2bx:bx |
| cisco | ios | 12.2by:by |
| cisco | ios | 12.2bz:bz |
| cisco | ios | 12.2ca:ca |
| cisco | ios | 12.2cx:cx |
| cisco | ios | 12.2cy:cy |
| cisco | ios | 12.2cz:cz |
| cisco | ios | 12.2da:da |
| cisco | ios | 12.2dd:dd |
| cisco | ios | 12.2dx:dx |
| cisco | ios | 12.2ew:ew |
| cisco | ios | 12.2ewa:ewa |
| cisco | ios | 12.2ex:ex |
| cisco | ios | 12.2ey:ey |
| cisco | ios | 12.2ez:ez |
| cisco | ios | 12.2fx:fx |
| cisco | ios | 12.2fy:fy |
| cisco | ios | 12.2fz:fz |
| cisco | ios | 12.2irb:irb |
| cisco | ios | 12.2ixa:ixa |
| cisco | ios | 12.2ixb:ixb |
| cisco | ios | 12.2ixc:ixc |
| cisco | ios | 12.2ixd:ixd |
| cisco | ios | 12.2ixe:ixe |
| cisco | ios | 12.2ixf:ixf |
| cisco | ios | 12.2ixg:ixg |
| cisco | ios | 12.2ja:ja |
| cisco | ios | 12.2jk:jk |
| cisco | ios | 12.2l:l |
| cisco | ios | 12.2mb:mb |
| cisco | ios | 12.2mc:mc |
| cisco | ios | 12.2rc:rc |
| cisco | ios | 12.2s:s |
| cisco | ios | 12.2sb:sb |
| cisco | ios | 12.2sbc:sbc |
| cisco | ios | 12.2sca:sca |
| cisco | ios | 12.2sga:sga |
| cisco | ios | 12.2sm:sm |
| cisco | ios | 12.2so:so |
| cisco | ios | 12.2sr:sr |
| cisco | ios | 12.2sra:sra |
| cisco | ios | 12.2srb:srb |
| cisco | ios | 12.2src:src |
| cisco | ios | 12.2su:su |
| cisco | ios | 12.2sv:sv |
| cisco | ios | 12.2sva:sva |
| cisco | ios | 12.2svc:svc |
| cisco | ios | 12.2svd:svd |
| cisco | ios | 12.2sve:sve |
| cisco | ios | 12.2sw:sw |
| cisco | ios | 12.2sx:sx |
| cisco | ios | 12.2sxa:sxa |
| cisco | ios | 12.2sxb:sxb |
| cisco | ios | 12.2sxd:sxd |
| cisco | ios | 12.2sxe:sxe |
| cisco | ios | 12.2sxf:sxf |
| cisco | ios | 12.2sy:sy |
| cisco | ios | 12.2sz:sz |
| cisco | ios | 12.2t:t |
| cisco | ios | 12.2tpc:tpc |
| cisco | ios | 12.2xa:xa |
| cisco | ios | 12.2xb:xb |
| cisco | ios | 12.2xc:xc |
| cisco | ios | 12.2xd:xd |
| cisco | ios | 12.2xe:xe |
| cisco | ios | 12.2xf:xf |
| cisco | ios | 12.2xg:xg |
| cisco | ios | 12.2xh:xh |
| cisco | ios | 12.2xi:xi |
| cisco | ios | 12.2xj:xj |
| cisco | ios | 12.2xk:xk |
| cisco | ios | 12.2xl:xl |
| cisco | ios | 12.2xm:xm |
| cisco | ios | 12.2xn:xn |
| cisco | ios | 12.2xo:xo |
| cisco | ios | 12.2xq:xq |
| cisco | ios | 12.2xr:xr |
| cisco | ios | 12.2xs:xs |
| cisco | ios | 12.2xt:xt |
| cisco | ios | 12.2xu:xu |
| cisco | ios | 12.2xv:xv |
| cisco | ios | 12.2xw:xw |
| cisco | ios | 12.2ya:ya |
| cisco | ios | 12.2yb:yb |
| cisco | ios | 12.2yc:yc |
| cisco | ios | 12.2yd:yd |
| cisco | ios | 12.2ye:ye |
| cisco | ios | 12.2yf:yf |
| cisco | ios | 12.2yg:yg |
| cisco | ios | 12.2yh:yh |
| cisco | ios | 12.2yj:yj |
| cisco | ios | 12.2yk:yk |
| cisco | ios | 12.2yl:yl |
| cisco | ios | 12.2ym:ym |
| cisco | ios | 12.2yn:yn |
| cisco | ios | 12.2yo:yo |
| cisco | ios | 12.2yp:yp |
| cisco | ios | 12.2yq:yq |
| cisco | ios | 12.2yr:yr |
| cisco | ios | 12.2ys:ys |
| cisco | ios | 12.2yt:yt |
| cisco | ios | 12.2yu:yu |
| cisco | ios | 12.2yv:yv |
| cisco | ios | 12.2yw:yw |
| cisco | ios | 12.2yx:yx |
| cisco | ios | 12.2yy:yy |
| cisco | ios | 12.2yz:yz |
| cisco | ios | 12.2za:za |
| cisco | ios | 12.2zb:zb |
| cisco | ios | 12.2zc:zc |
| cisco | ios | 12.2zd:zd |
| cisco | ios | 12.2ze:ze |
| cisco | ios | 12.2zf:zf |
| cisco | ios | 12.2zg:zg |
| cisco | ios | 12.2zh:zh |
| cisco | ios | 12.2zj:zj |
| cisco | ios | 12.2zl:zl |
| cisco | ios | 12.2zp:zp |
| cisco | ios | 12.2zu:zu |
| cisco | ios | 12.2zx:zx |
| cisco | ios | 12.2zy:zy |
| cisco | ios | 12.2zya:zya |
| cisco | ios | 12.4 |
| cisco | ios | 12.4\(1\) |
| cisco | ios | 12.4\(1b\) |
| cisco | ios | 12.4\(1c\) |
| cisco | ios | 12.4\(2\)mr |
| cisco | ios | 12.4\(2\)mr1 |
| cisco | ios | 12.4\(2\)t |
| cisco | ios | 12.4\(2\)t1 |
| cisco | ios | 12.4\(2\)t2 |
| cisco | ios | 12.4\(2\)t3 |
| cisco | ios | 12.4\(2\)t4 |
| cisco | ios | 12.4\(2\)xa |
| cisco | ios | 12.4\(2\)xb |
| cisco | ios | 12.4\(2\)xb2 |
| cisco | ios | 12.4\(3\) |
| cisco | ios | 12.4\(3\)t2 |
| cisco | ios | 12.4\(3a\) |
| cisco | ios | 12.4\(3b\) |
| cisco | ios | 12.4\(3d\) |
| cisco | ios | 12.4\(4\)mr |
| cisco | ios | 12.4\(4\)t |
| cisco | ios | 12.4\(4\)t2 |
| cisco | ios | 12.4\(5\) |
| cisco | ios | 12.4\(5b\) |
| cisco | ios | 12.4\(6\)t |
| cisco | ios | 12.4\(6\)t1 |
| cisco | ios | 12.4\(7\) |
| cisco | ios | 12.4\(7a\) |
| cisco | ios | 12.4\(8\) |
| cisco | ios | 12.4\(9\)t |
| cisco | ios | 12.4\(23\) |
| cisco | ios | 12.4ja:ja |
| cisco | ios | 12.4jda:jda |
| cisco | ios | 12.4jk:jk |
| cisco | ios | 12.4jl:jl |
| cisco | ios | 12.4jma:jma |
| cisco | ios | 12.4jmb:jmb |
| cisco | ios | 12.4jx:jx |
| cisco | ios | 12.4md:md |
| cisco | ios | 12.4mr:mr |
| cisco | ios | 12.4s:s |
| cisco | ios | 12.4sw:sw |
| cisco | ios | 12.4t:t |
| cisco | ios | 12.4xa:xa |
| cisco | ios | 12.4xb:xb |
| cisco | ios | 12.4xc:xc |
| cisco | ios | 12.4xd:xd |
| cisco | ios | 12.4xe:xe |
| cisco | ios | 12.4xf:xf |
| cisco | ios | 12.4xg:xg |
| cisco | ios | 12.4xj:xj |
| cisco | ios | 12.4xk:xk |
| cisco | ios | 12.4xl:xl |
| cisco | ios | 12.4xm:xm |
| cisco | ios | 12.4xn:xn |
| cisco | ios | 12.4xp:xp |
| cisco | ios | 12.4xt:xt |
| cisco | ios | 12.4xv:xv |
| cisco | ios | 12.4xw:xw |
| cisco | ios | 12.4xy:xy |
| cisco | ios_xr | 12.4 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References