CVE-2000-0268 Denial of service in n/a
Remote attackers can cause a denial of service and system reboot on Cisco IOS devices by sending a malformed Telnet option.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2000-0268?
CVE-2000-0268 is a medium-severity denial of service vulnerability in Cisco Ios, published on 2 Jun 2000. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Cisco IOS 11.x and 12.x allows remote attackers to cause a denial of service by sending the ENVIRON option to the Telnet daemon before it is ready to accept it, which causes the system to reboot.
Which versions are affected by CVE-2000-0268?
It affects 12 products.
Products include Cisco 3660 Router, Cisco 7100 Router, Cisco 7200 Router, Cisco 7500 Router, Cisco Accesspath, Cisco As5200 and 6 more.
How do I fix CVE-2000-0268?
No fix has been published for CVE-2000-0268 yet. Limit exposure of the affected software until one is available.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2000-0268 being exploited?
There is no known exploitation of CVE-2000-0268 in the wild and no public exploit code.
Sources
Also known as GHSA-c43m-vj32-q46r.