CVE:CVE-2007-1257
CNNVD:CNNVD-200703-133
Cisco Catalyst是一系列由Cisco公司发表和维护的商业级别交换机。
Catalyst 6000、6500系列和Cisco 7600系列中部署了网络分析模块(NAM)，使用远程监控(RMON)、RMON2和其他MIB监控和分析网络通讯。NAM使用简单网络管理协议(SNMP)与Catalyst系统进行通讯，攻击者可以通过欺骗Catalyst系统与NAM之间的SNMP通讯获得对Catalyst系统的完全控制。
solution:Upgrade cisco network_analysis_module to a higher version than *; Upgrade cisco catalyst_6000_ws-svc-nam-1 to a higher version than 2.2(1a,and avoid the version 2.2(1a); Upgrade cisco catalyst_6000_ws-svc-nam-2 to a higher version than 2.2(1a,and avoid the version 2.2(1a); Upgrade cisco catalyst_6000_ws-x6380-nam to a higher version than 3.1(1a,and avoid the version 3.1(1a); Upgrade cisco catalyst_6500_ws-svc-nam-1 to a higher version than 2.2(1a,and avoid the version 2.2(1a); Upgrade cisco catalyst_6500_ws-svc-nam-2 to a higher version than 2.2(1a,and avoid the version 2.2(1a); Upgrade cisco catalyst_6500_ws-x6380-nam to a higher version than 3.1(1a,and avoid the version 3.1(1a); Upgrade cisco catalyst_7600_ws-svc-nam-1 to a higher version than 2.2(1a,and avoid the version 2.2(1a); Upgrade cisco catalyst_7600_ws-svc-nam-2 to a higher version than 2.2(1a,and avoid the version 2.2(1a); Upgrade cisco catalyst_7600_ws-x6380-nam to a higher version than 3.1(1a,and avoid the version 3.1(1a)