Open Vulnerability and Assessment Language (OVAL)
Offical Language Release Repository Downloads News — November 5, 2009 Search
link to OVAL home page
 OVAL Repository > View Definition

View Definition

Definition Id: oval:org.mitre.oval:def:5919 Date: 2008-09-24
Title: Cisco IOS MPLS VPN May Leak Information Vulnerability
Description: A "logic error" in Cisco IOS 12.0 through 12.4, when a Multiprotocol Label Switching (MPLS) VPN with extended communities is configured, sometimes causes a corrupted route target (RT) to be used, which allows remote attackers to read traffic from other VPNs in opportunistic circumstances.
Version: 1 Class: vulnerability
Status: ACCEPTED Reference(s): CVE-2008-3803
Family: ios
Platform(s): Cisco IOS Product(s):
Definition Synopsis:

 

OVAL is sponsored by the National Cyber Security Division of the U.S. Department of Homeland Security.

The OVAL Web site is hosted by The MITRE Corporation.

Copyright 2002-2009, The MITRE Corporation. All rights reserved. OVAL and the OVAL logo are registered trademarks of The MITRE Corporation.

Contact oval@mitre.org for more information.
Privacy policy
Terms of use