CVE-2016-6398
published 2016-09-12CVE-2016-6398: The PPTP server in Cisco IOS 15.5(3)M does not properly initialize packet buffers, which allows remote attackers to obtain sensitive information from earlier…
PriorityP426medium5.3CVSS 3.0
AVNACLPRNUINSUCLINAN
EPSS
1.26%
66.2th percentile
The PPTP server in Cisco IOS 15.5(3)M does not properly initialize packet buffers, which allows remote attackers to obtain sensitive information from earlier network communication by reading packet data, aka Bug ID CSCvb16274.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | ios | — | — |
| cisco | ios | — | — |
CVSS provenance
nvdv3.05.3MEDIUMCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
vendor_cisco5.0MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-qg58-pgjg-rwwr: The PPTP server in Cisco IOS 15
ghsa_unreviewed·2022-05-17
CVE-2016-6398 [MEDIUM] CWE-200 GHSA-qg58-pgjg-rwwr: The PPTP server in Cisco IOS 15
The PPTP server in Cisco IOS 15.5(3)M does not properly initialize packet buffers, which allows remote attackers to obtain sensitive information from earlier network communication by reading packet data, aka Bug ID CSCvb16274.
Cisco
Cisco IOS Software Point-to-Point Tunneling Protocol Server Information Disclosure Vulnerability
vendor_cisco·2016-09-02·CVSS 5.0
CVE-2016-6398 [MEDIUM] CWE-200 Cisco IOS Software Point-to-Point Tunneling Protocol Server Information Disclosure Vulnerability
Cisco IOS Software Point-to-Point Tunneling Protocol Server Information Disclosure Vulnerability
A vulnerability in the implementation of Point-to-Point Tunneling Protocol (PPTP) server functionality in Cisco IOS Software could allow an unauthenticated, remote attacker to access data from a packet buffer that was previously used.
The vulnerability is due to the use of a previously used packet buffer whose content was not cleared from memory. An attacker could exploit this vulnerability by sending a PPTP connection request to device that is running a vulnerable release of the affected software and is configured for PPTP server functionality. A successful exploit could allow the attacker to access up to 63 bytes of memory that were previously used for a packet and were either destined to t
Cisco
Cisco IOS Software Point-to-Point Tunneling Protocol Server Information Disclosure Vulnerability
vendor_cisco
CVE-2016-6398 Cisco IOS Software Point-to-Point Tunneling Protocol Server Information Disclosure Vulnerability
CVE-2016-6398: Cisco IOS Software Point-to-Point Tunneling Protocol Server Information Disclosure Vulnerability
A vulnerability in the implementation of Point-to-Point Tunneling Protocol (PPTP) server functionality in Cisco IOS Software could allow an unauthenticated, remote attacker to access data from a packet buffer that was previously used. The vulnerability is due to the use of a previously used packet buffer whose content was not cleared from memory. An attacker could exploit this vulnerability by sending a PPTP connection request to device that is running a vulnerable release of the affected software and is configured for PPTP server functionality. A successful exploit could allow the attacker to access up to 63 bytes of memory that were previously used for a packet and were either
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160902-ioshttp://www.securityfocus.com/bid/92734http://www.securitytracker.com/id/1036732http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160902-ioshttp://www.securityfocus.com/bid/92734http://www.securitytracker.com/id/1036732
2016-09-12
Published