CVE-1999-1464

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

Vulnerability in Cisco IOS 11.1CC and 11.1CT with distributed fast switching (DFS) enabled allows remote attackers to bypass certain access control lists when the router switches traffic from a DFS-enabled interface to an interface that does not have DFS enabled, as described by Cisco bug CSCdk35564.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://ciac.llnl.gov/ciac/bulletins/j-016.shtmlPatch, Vendor Advisory
http://www.cisco.com/warp/public/770/iosdfsacl-pub.shtmlPatch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/1401
http://ciac.llnl.gov/ciac/bulletins/j-016.shtmlPatch, Vendor Advisory
http://www.cisco.com/warp/public/770/iosdfsacl-pub.shtmlPatch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/1401

Timeline

Published: Dec 31, 1999
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 1999

CVE-1999-14657.5Vulnerability in Cisco IOS 11.1 through 11.3 with distributed fast switching (DFS) enabled allows remote attackers to bypass certain access CVE-1999-14697.5Buffer overflow in w3-auth CGI program in miniSQL package allows remote attackers to execute arbitrary commands via an HTTP request with (1)CVE-1999-14704.6Eastman Work Management 3.21 stores passwords in cleartext in the COMMON and LOCATOR registry keys, which could allow local users to gain pr CVE-1999-14725.0Internet Explorer 4.0 allows remote attackers to read arbitrary text and HTML files on the user's machine via a small IFRAME that uses Dynam CVE-1999-14735.0When a Web site redirects the browser to another site, Internet Explorer 3.02 and 4.0 automatically resends authentication information to th CVE-1999-14747.5PowerPoint 95 and 97 allows remote attackers to cause an application to be run automatically without prompting the user, possibly through th CVE-1999-14754.6ProFTPd 1.2 compiled with the mod_sqlpw module records user passwords in the wtmp log file, which allows local users to obtain the passwords CVE-1999-14762.1A bug in Intel Pentium processor (MMX and Overdrive) allows local users to cause a denial of service (hang) in Intel-based operating systems CVE-1999-14777.2Buffer overflow in GNOME libraries 1.0.8 allows local user to gain root access via a long --espeaker argument in programs such as nethack.CVE-1999-14785.0The Sun HotSpot Performance Engine VM allows a remote attacker to cause a denial of service on any server running HotSpot via a URL that inc CVE-1999-14815.0Squid 2.2.STABLE5 and below, when using external authentication, allows attackers to bypass access controls via a newline in the user/passwo CVE-1999-14827.2SVGAlib zgv 3.0-7 and earlier allows local users to gain root access via a privilege leak of the iopl(3) privileges to child processes.