PT-2007-2395 · Cisco · Cisco Pix 500 Series Security Appliances+2

Publicado 2007-02-14 · Atualizado 2018-10-30 · CVE-2007-0960

Positive Technologies (AI Summary)

CVSS v2.0

9.0

Alta

Vetor base

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Cisco PIX 500 and ASA 5500 Series Security Appliances version 7.2.2

Description: The issue allows remote authenticated users to gain elevated privileges on the device via unspecified vectors when configured to use the LOCAL authentication method. This could enable an authenticated, remote attacker to gain elevated privileges.

Recommendations: For version 7.2.2, consider disabling the LOCAL authentication method as a temporary workaround until a patch is available. Restrict access to the device to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2007-0960

Produtos afetados

Cisco Asa 5500 Series Security Appliances

Cisco Asa

Cisco Pix 500 Series Security Appliances

Referências · 12

• http://osvdb.org/33063 · Nota
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20070214-CVE-2007-0960 · Aviso do Fabricante
• http://secunia.com/advisories/24160 · Aviso do Fabricante
• http://securityfocus.com/bid/22562 · Nota
• http://secunia.com/advisories/24179 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-0960 · Nota de Segurança
• http://securityfocus.com/bid/22561 · Nota
• http://securitytracker.com/id?1017651 · Correção
• http://cisco.com/en/US/products/products_security_advisory09186a00807e2484.shtml · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/32489 · Nota
• http://vupen.com/english/advisories/2007/0608 · Nota
• http://securitytracker.com/id?1017652 · Nota