Cisco Catalyst 4000 series switches running CatOS 5.5.5, 6.3.5, and 7.1.2 do not always learn MAC addresses from a single initial packet, which causes unicast traffic to be broadcast across the switch and allows remote attackers to obtain sensitive network information by sniffing.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Catos | Cisco | 5.5(5) (including) | 5.5(5) (including) |
| Catos | Cisco | 6.3(5) (including) | 6.3(5) (including) |
| Catos | Cisco | 7.1(2) (including) | 7.1(2) (including) |
References
- http://archives.neohapsis.com/archives/bugtraq/2002-05/0190.html
- http://archives.neohapsis.com/archives/bugtraq/2002-06/0209.html
- http://www.iss.net/security_center/static/9148.php
- http://www.securityfocus.com/bid/4790
- http://archives.neohapsis.com/archives/bugtraq/2002-05/0190.html
- http://archives.neohapsis.com/archives/bugtraq/2002-06/0209.html
- http://www.iss.net/security_center/static/9148.php
- http://www.securityfocus.com/bid/4790