Vulnerability Description
Classic Cisco IOS 9.1 and later allows attackers with access to the login prompt to obtain portions of the command history of previous users, which may allow the attacker to access sensitive data.
CVSS Score
2.1
LOW
AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Ios | <= 9.1 |
Related Weaknesses (CWE)
References
- http://www.ciac.org/ciac/bulletins/j-009.shtmlPatchVendor Advisory
- http://www.cisco.com/warp/public/770/ioshist-pub.shtmlPatchVendor Advisory
- http://www.ciac.org/ciac/bulletins/j-009.shtmlPatchVendor Advisory
- http://www.cisco.com/warp/public/770/ioshist-pub.shtmlPatchVendor Advisory
FAQ
What is CVE-2000-0368?
CVE-2000-0368 is a vulnerability with a CVSS score of 2.1 (LOW). Classic Cisco IOS 9.1 and later allows attackers with access to the login prompt to obtain portions of the command history of previous users, which may allow the attacker to access sensitive data.
How severe is CVE-2000-0368?
CVE-2000-0368 has been rated LOW with a CVSS base score of 2.1/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2000-0368?
Check the references section above for vendor advisories and patch information. Affected products include: Cisco Ios.