PT-2007-3787 · Cisco · Cisco Asa+1

CVE-2007-2463 · Publicado 2007-05-02 · Atualizado 2023-08-11

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco Adaptive Security Appliance (ASA) and PIX versions 7.1 before 7.1(2)49 Cisco Adaptive Security Appliance (ASA) and PIX versions 7.2 before 7.2(2)17

Description The issue allows remote attackers to cause a denial of service, resulting in a device reload. This is related to VPN connection termination and password expiry. Additionally, there are Lightweight Directory Access Protocol (LDAP) authentication bypass vulnerabilities and denial of service (DoS) vulnerabilities.

Recommendations For Cisco Adaptive Security Appliance (ASA) and PIX versions 7.1 before 7.1(2)49, update to version 7.1(2)49 or later. For Cisco Adaptive Security Appliance (ASA) and PIX versions 7.2 before 7.2(2)17, update to version 7.2(2)17 or later.

Correção

Identificadores relacionados

CVE-2007-2463

Produtos afetados

Cisco Asa

Pix

Referências · 8

• http://vupen.com/english/advisories/2007/1636 · Aviso do Fabricante
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20070502-asa · Aviso do Fabricante
• http://osvdb.org/35332 · Nota
• http://cisco.com/en/US/products/products_security_advisory09186a0080833166.shtml · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2007-2463 · Nota de Segurança
• http://secunia.com/advisories/25109 · Nota
• http://securityfocus.com/bid/23768 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34021 · Nota