PT-2007-2394 · Cisco · Cisco Pix 500 Series Security Appliances+2

Publicado 2007-02-14 · Atualizado 2018-10-30 · CVE-2007-0959

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions: Cisco PIX 500 and ASA 5500 Series Security Appliances version 7.2.2

Description: The issue allows remote attackers to cause a denial of service, resulting in a device reboot, via malformed TCP packets when configured to inspect certain TCP-based protocols. An unauthenticated, remote attacker can also crash an affected device, causing a denial of service condition.

Recommendations: For version 7.2.2, consider temporarily disabling the inspection of TCP-based protocols to minimize the risk of exploitation. Restrict access to the device to minimize the risk of remote attackers sending malformed TCP packets. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2007-0959

Produtos afetados

Cisco Asa 5500 Series Security Appliances

Cisco Asa

Cisco Pix 500 Series Security Appliances

Referências · 11

• http://securityfocus.com/bid/22562 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/32488 · Nota
• http://osvdb.org/33062 · Nota
• http://secunia.com/advisories/24160 · Aviso do Fabricante
• http://securityfocus.com/bid/22561 · Nota
• http://securitytracker.com/id?1017651 · Correção
• http://cisco.com/en/US/products/products_security_advisory09186a00807e2484.shtml · Aviso do Fabricante
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20070214-CVE-2007-0959 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2007-0959 · Nota de Segurança
• http://vupen.com/english/advisories/2007/0608 · Nota
• http://securitytracker.com/id?1017652 · Nota