CVE:CVE-2007-5134
CNNVD:CNNVD-200709-409
Cisco Catalyst是一系列由Cisco公司发表和维护的商业级别交换机。
Catalyst 6500和Cisco 7600系列设备在处理环回地址时存在漏洞，远程攻击者可能利用此绕过某些验证获得非授权访问。
Catalyst 6500和Cisco 7600系列设备使用以太网带外信道(EOBC)中127.0.0.0/8(环回)范围的地址进行内部通讯，可以从系统外部访问EOBC中所使用的这个范围的地址。Supervisor模块、多层交换功能卡(MSFC)或任何其他智能模块可能接受并处理目标为127.0.0.0/8网络的报文，攻击者可以利用这种行为绕过没有过滤127.0.0.0/8地址范围的访问控制列表，但无法绕过认证或授权。
solution:Upgrade cisco catalyst_6500 to a higher version than *; Upgrade cisco catalyst_6500_ws-svc-nam-1 to a higher version than 2.2(1a,3.1(1a,and avoid the version 2.2(1a),3.1(1a); Upgrade cisco catalyst_6500_ws-svc-nam-2 to a higher version than 2.2(1a,3.1(1a,and avoid the version 2.2(1a),3.1(1a); Upgrade cisco catalyst_6500_ws-x6380-nam to a higher version than 2.1(2,3.1(1a,and avoid the version 2.1(2),3.1(1a); Upgrade cisco catalyst_7600 to a higher version than *; Upgrade cisco catalyst_7600_ws-svc-nam-1 to a higher version than 2.2(1a,3.1(1a,and avoid the version 2.2(1a),3.1(1a); Upgrade cisco catalyst_7600_ws-svc-nam-2 to a higher version than 2.2(1a,3.1(1a,and avoid the version 2.2(1a),3.1(1a); Upgrade cisco catalyst_7600_ws-x6380-nam to a higher version than 2.1(2,3.1(1a,and avoid the version 2.1(2),3.1(1a); Upgrade cisco catos to a higher version than 5.4(1,7.5(1,7.6(1,and avoid the version 5.4(1),7.5(1),7.6(1)