PT-2007-3786 · Cisco · Cisco Asa+1

Ryan Giobbi · Publicado 2007-05-02 · Atualizado 2023-08-11 · CVE-2007-2462

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cisco Adaptive Security Appliance (ASA) and PIX version 7.2 before 7.2(2)8

Description The issue concerns an unspecified vulnerability that allows remote attackers to bypass LDAP authentication and gain privileges when using Layer 2 Tunneling Protocol (L2TP) or Remote Management Access. Additionally, there are multiple vulnerabilities, including LDAP authentication bypass vulnerabilities and denial of service (DoS) vulnerabilities.

Recommendations For Cisco Adaptive Security Appliance (ASA) and PIX version 7.2 before 7.2(2)8, update to version 7.2(2)8 or later to resolve the issue. As a temporary workaround, consider restricting access to Remote Management and L2TP to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2007-2462

Produtos afetados

Cisco Asa

Pix

Referências · 11

• https://exchange.xforce.ibmcloud.com/vulnerabilities/34020 · Nota
• http://osvdb.org/35331 · Nota
• http://kb.cert.org/vuls/id/210876 · Nota
• http://vupen.com/english/advisories/2007/1636 · Nota
• http://securitytracker.com/id?1017995 · Nota
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20070502-asa · Aviso do Fabricante
• http://cisco.com/en/US/products/products_security_advisory09186a0080833166.shtml · Correção, Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2007-2462 · Nota de Segurança
• http://securitytracker.com/id?1017994 · Nota
• http://secunia.com/advisories/25109 · Nota
• http://securityfocus.com/bid/23768 · Nota