Details of VAR-199710-0008

ID

VAR-199710-0008

CVE

CVE-1999-0160

TITLE

Cisco Systems Cisco IOS Vulnerability in

Trust: 0.8

sources: JVNDB: JVNDB-1997-000002

DESCRIPTION

Some classic Cisco IOS devices have a vulnerability in the PPP CHAP authentication to establish unauthorized PPP connections. Cisco Systems Cisco IOS Exists in unspecified vulnerabilities.None

Trust: 1.71

sources: NVD: CVE-1999-0160 // JVNDB: JVNDB-1997-000002 // VULHUB: VHN-160

AFFECTED PRODUCTS

vendor:	cisco	model:	ios	scope:	eq	version:	11.1	Trust: 1.6
vendor:	cisco	model:	ios	scope:	eq	version:	4.1	Trust: 1.6
vendor:	cisco	model:	ios	scope:	eq	version:	11.2p	Trust: 1.6
vendor:	cisco	model:	ios	scope:	eq	version:	11.0	Trust: 1.6
vendor:	cisco	model:	ios	scope:	eq	version:	9.1	Trust: 1.6
vendor:	cisco	model:	ios	scope:	eq	version:	11.2	Trust: 1.6
vendor:	cisco	model:	ios	scope:	eq	version:	10.3	Trust: 1.6
vendor:	シスコシステムズ	model:	cisco ios	scope:	eq	version:	11.1	Trust: 0.8
vendor:	シスコシステムズ	model:	cisco ios	scope:	eq	version:	11.2p	Trust: 0.8
vendor:	シスコシステムズ	model:	cisco ios	scope:	eq	version:	11.0	Trust: 0.8
vendor:	シスコシステムズ	model:	cisco ios	scope:	eq	version:	11.2	Trust: 0.8
vendor:	シスコシステムズ	model:	cisco ios	scope:	eq	version:	4.1	Trust: 0.8
vendor:	シスコシステムズ	model:	cisco ios	scope:	eq	version:	9.1	Trust: 0.8
vendor:	シスコシステムズ	model:	cisco ios	scope:	eq	version:	-	Trust: 0.8
vendor:	シスコシステムズ	model:	cisco ios	scope:	eq	version:	10.3	Trust: 0.8

sources: JVNDB: JVNDB-1997-000002 // CNNVD: CNNVD-199710-007 // NVD: CVE-1999-0160

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-1999-0160
value:	HIGH
Trust: 1.0
NVD:	CVE-1999-0160
value:	HIGH
Trust: 0.8
CNNVD:	CNNVD-199710-007
value:	HIGH
Trust: 0.6
VULHUB:	VHN-160
value:	HIGH
Trust: 0.1

nvd@nist.gov:	CVE-1999-0160
severity:	HIGH
baseScore:	7.5
vectorString:	AV:N/AC:L/AU:N/C:P/I:P/A:P
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	PARTIAL
availabilityImpact:	PARTIAL
exploitabilityScore:	10.0
impactScore:	6.4
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.8
VULHUB:	VHN-160
severity:	HIGH
baseScore:	7.5
vectorString:	AV:N/AC:L/AU:N/C:P/I:P/A:P
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	PARTIAL
availabilityImpact:	PARTIAL
exploitabilityScore:	10.0
impactScore:	6.4
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

sources: VULHUB: VHN-160 // JVNDB: JVNDB-1997-000002 // CNNVD: CNNVD-199710-007 // NVD: CVE-1999-0160

PROBLEMTYPE DATA

problemtype:	NVD-CWE-Other	Trust: 1.0
problemtype:	others (CWE-Other) [NVD evaluation ]	Trust: 0.8

sources: JVNDB: JVNDB-1997-000002 // NVD: CVE-1999-0160

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-199710-007

TYPE

unknown

Trust: 0.6

sources: CNNVD: CNNVD-199710-007

PATCH

title:

Products IOS Cisco IOS Software Releases

url:

https://www.cisco.com/c/en/us/products/ios-nx-os-software/ios-software-releases-listing.html

Trust: 0.8

sources: JVNDB: JVNDB-1997-000002

EXTERNAL IDS

db:	NVD	id:	CVE-1999-0160	Trust: 3.3
db:	OSVDB	id:	1099	Trust: 1.7
db:	JVNDB	id:	JVNDB-1997-000002	Trust: 0.8
db:	CNNVD	id:	CNNVD-199710-007	Trust: 0.7
db:	VULHUB	id:	VHN-160	Trust: 0.1

sources: VULHUB: VHN-160 // JVNDB: JVNDB-1997-000002 // CNNVD: CNNVD-199710-007 // NVD: CVE-1999-0160

REFERENCES

url:	http://www.osvdb.org/1099	Trust: 1.7
url:	https://nvd.nist.gov/vuln/detail/cve-1999-0160	Trust: 0.8
url:	-	Trust: 0.1

sources: VULHUB: VHN-160 // JVNDB: JVNDB-1997-000002 // CNNVD: CNNVD-199710-007 // NVD: CVE-1999-0160

SOURCES

db:	VULHUB	id:	VHN-160
db:	JVNDB	id:	JVNDB-1997-000002
db:	CNNVD	id:	CNNVD-199710-007
db:	NVD	id:	CVE-1999-0160

LAST UPDATE DATE

2024-08-14T15:36:17.760000+00:00

SOURCES UPDATE DATE

db:	VULHUB	id:	VHN-160	date:	2008-09-09T00:00:00
db:	JVNDB	id:	JVNDB-1997-000002	date:	2024-05-07T09:33:00
db:	CNNVD	id:	CNNVD-199710-007	date:	2010-12-02T00:00:00
db:	NVD	id:	CVE-1999-0160	date:	2008-09-09T12:33:53.210

SOURCES RELEASE DATE

db:	VULHUB	id:	VHN-160	date:	1997-10-01T00:00:00
db:	JVNDB	id:	JVNDB-1997-000002	date:	2024-05-07T00:00:00
db:	CNNVD	id:	CNNVD-199710-007	date:	1997-10-01T00:00:00
db:	NVD	id:	CVE-1999-0160	date:	1997-10-01T04:00:00