PT-2005-4539 · Cisco · Cisco Asa

Amin Tora · Published 2005-11-24 · Updated 2023-08-11 · CVE-2005-3788

Positive Technologies (AI Summary)

CVSS v2.0

5.4

Medium

Base vector

AV:N/AC:H/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco Adaptive Security Appliance (ASA) versions 7.0(0) through 7.0(4)

Description The issue is related to a race condition that occurs when the Cisco Adaptive Security Appliance (ASA) is running with an Active/Standby configuration and the failover LAN interface fails. This allows remote attackers to cause a denial of service by sending spoofed ARP responses from an IP address of an active firewall, preventing the standby firewall from becoming active.

Recommendations For Cisco Adaptive Security Appliance (ASA) versions 7.0(0) through 7.0(4), consider configuring the failover setup to use a more secure method to prevent spoofed ARP responses, and ensure that the standby firewall can become active even if the failover LAN interface fails. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2005-3788

Affected Products

Cisco Asa

References · 8

• http://securitytracker.com/id?1015205 · Vendor Advisory
• http://secunia.com/advisories/17550 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-3788 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/23160 · Note
• http://marc.info/?l=bugtraq&m=113201784415859&w=2 · Note
• http://marc.info/?l=bugtraq&m=113199814008230&w=2 · Note
• http://securityreason.com/securityalert/178 · Note
• http://securityfocus.com/bid/15407 · Note