PT-2009-3717 · Cisco · Cisco Asa 5500 Series+1

Publicado

2009-04-08

·

Atualizado

2009-04-28

·

CVE-2009-1158

CVSS v2.0

7.8

Alta

VetorAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions Cisco Adaptive Security Appliances (ASA) 5500 Series devices versions 7.0 through 7.0(8)5 Cisco Adaptive Security Appliances (ASA) 5500 Series devices versions 7.1 through 7.1(2)81 Cisco Adaptive Security Appliances (ASA) 5500 Series devices versions 7.2 through 7.2(4)25 Cisco Adaptive Security Appliances (ASA) 5500 Series devices versions 8.0 through 8.0(4)23 Cisco Adaptive Security Appliances (ASA) 5500 Series devices versions 8.1 through 8.1(2)13
Description The issue allows remote attackers to cause a denial of service (device reload) via a crafted H.323 packet when H.323 inspection is enabled. Multiple vulnerabilities exist in the Cisco ASA 5500 Series Adaptive Security Appliances.
Recommendations For versions 7.0 through 7.0(8)5, update to version 7.0(8)6 or later. For versions 7.1 through 7.1(2)81, update to version 7.1(2)82 or later. For versions 7.2 through 7.2(4)25, update to version 7.2(4)26 or later. For versions 8.0 through 8.0(4)23, update to version 8.0(4)24 or later. For versions 8.1 through 8.1(2)13, update to version 8.1(2)14 or later. As a temporary workaround, consider disabling H.323 inspection until a patch is available.

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

CVE-2009-1158

Produtos afetados

Cisco Asa 5500 Series
Cisco Asa