CVE-2008-3803

MediumCVSS 5.1/10Last modified Jun 16, 2026

Description

A "logic error" in Cisco IOS 12.0 through 12.4, when a Multiprotocol Label Switching (MPLS) VPN with extended communities is configured, sometimes causes a corrupted route target (RT) to be used, which allows remote attackers to read traffic from other VPNs in opportunistic circumstances.

Metrics

CVSS 2.0 5.1/10AV:N/AC:H/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://secunia.com/advisories/31990Third Party Advisory
http://www.cisco.com/en/US/products/products_security_advisory09186a0080a014a9.shtmlVendor Advisory
http://www.securityfocus.com/bid/31366Third Party Advisory, VDB Entry
http://www.securitytracker.com/id?1020940Broken Link, Third Party Advisory, VDB Entry
http://www.vupen.com/english/advisories/2008/2670Permissions Required
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5919Third Party Advisory
http://secunia.com/advisories/31990Third Party Advisory
http://www.cisco.com/en/US/products/products_security_advisory09186a0080a014a9.shtmlVendor Advisory
http://www.securityfocus.com/bid/31366Third Party Advisory, VDB Entry
http://www.securitytracker.com/id?1020940Broken Link, Third Party Advisory, VDB Entry
http://www.vupen.com/english/advisories/2008/2670Permissions Required
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5919Third Party Advisory

Timeline

Published: Sep 26, 2008
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2008

CVE-2008-38047.1Unspecified vulnerability in the Multi Protocol Label Switching (MPLS) Forwarding Infrastructure (MFI) in Cisco IOS 12.2 and 12.4 allows rem CVE-2008-38058.5Cisco IOS 12.0 through 12.4 on Cisco 10000, uBR10012 and uBR7200 series devices handles external UDP packets that are sent to 127.0.0.0/8 ad CVE-2008-38068.5Cisco IOS 12.0 through 12.4 on Cisco 10000, uBR10012 and uBR7200 series devices handles external UDP packets that are sent to 127.0.0.0/8 ad CVE-2008-38079.3Cisco IOS 12.2 and 12.3 on Cisco uBR10012 series devices, when linecard redundancy is configured, enables a read/write SNMP service with "pr CVE-2008-38087.8Unspecified vulnerability in Cisco IOS 12.0 through 12.4 allows remote attackers to cause a denial of service (device reload) via a crafted CVE-2008-38097.1Cisco IOS 12.0 through 12.4 on Gigabit Switch Router (GSR) devices (aka 12000 Series routers) allows remote attackers to cause a denial of s CVE-2008-38107.8Cisco IOS 12.2 and 12.4, when NAT Skinny Call Control Protocol (SCCP) Fragmentation Support is enabled, allows remote attackers to cause a d CVE-2008-38117.8Cisco IOS 12.2 and 12.4, when NAT Skinny Call Control Protocol (SCCP) Fragmentation Support is enabled, allows remote attackers to cause a d CVE-2008-38127.1Cisco IOS 12.4, when IOS firewall Application Inspection Control (AIC) with HTTP Deep Packet Inspection is enabled, allows remote attackers CVE-2008-38137.8Unspecified vulnerability in Cisco IOS 12.2 and 12.4, when the L2TP mgmt daemon process is enabled, allows remote attackers to cause a denia CVE-2008-38145.8Unspecified vulnerability in Cisco Unity 4.x before 4.2(1)ES161, 5.x before 5.0(1)ES53, and 7.x before 7.0(2)ES8, when using anonymous authe CVE-2008-38154.3Unspecified vulnerability in Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances 7.0 before 7.0(8)3, 7.1 before