CVE-2009-2862

The Object Groups for Access Control Lists (ACLs) feature in Cisco IOS 12.2XNB, 12.2XNC, 12.2XND, 12.4MD, 12.4T, 12.4XZ, and 12.4YA allows remote attackers to bypass intended access restrictions via crafted requests, aka Bug IDs CSCsx07114, CSCsu70214, CSCsw47076, CSCsv48603, CSCsy54122, and CSCsu50252.

• http://osvdb.org/58338Broken Link
• http://tools.cisco.com/security/center/viewAlert.x?alertId=18876Vendor Advisory
• http://www.cisco.com/en/US/products/products_security_advisory09186a0080af8119.shtmlVendor Advisory
• http://www.securityfocus.com/bid/36495Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id?1022933Broken Link, Third Party Advisory, VDB Entry
• http://www.vupen.com/english/advisories/2009/2759Permissions Required
• http://osvdb.org/58338Broken Link
• http://tools.cisco.com/security/center/viewAlert.x?alertId=18876Vendor Advisory
• http://www.cisco.com/en/US/products/products_security_advisory09186a0080af8119.shtmlVendor Advisory
• http://www.securityfocus.com/bid/36495Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id?1022933Broken Link, Third Party Advisory, VDB Entry
• http://www.vupen.com/english/advisories/2009/2759Permissions Required

Published

Sep 28, 2009

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2009-2856Sun Virtual Desktop Infrastructure (VDI) 3.0, when anonymous…
• CVE-2009-2857The kernel in Sun Solaris 8, 9, and 10, and OpenSolaris befo…5.5
• CVE-2009-2858Memory leak in the Security component in IBM DB2 8.1 before …
• CVE-2009-2859IBM DB2 8.1 before FP18 allows attackers to obtain unspecifi…
• CVE-2009-2860Unspecified vulnerability in db2jds in IBM DB2 8.1 before FP…
• CVE-2009-2861The Over-the-Air Provisioning (OTAP) functionality on Cisco …
• CVE-2009-2863Race condition in the Firewall Authentication Proxy feature …
• CVE-2009-2864Cisco Unified Communications Manager (aka CUCM, formerly Cal…
• CVE-2009-2865Buffer overflow in the login implementation in the Extension…
• CVE-2009-2866Unspecified vulnerability in Cisco IOS 12.2 through 12.4 all…
• CVE-2009-2867Unspecified vulnerability in Cisco IOS 12.2XNA, 12.2XNB, 12.…
• CVE-2009-2868Unspecified vulnerability in Cisco IOS 12.2 through 12.4, wh…