PT-2007-2394 · Cisco · Cisco Pix 500 Series Security Appliances+2

Published 2007-02-14 · Updated 2018-10-30 · CVE-2007-0959

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions: Cisco PIX 500 and ASA 5500 Series Security Appliances version 7.2.2

Description: The issue allows remote attackers to cause a denial of service, resulting in a device reboot, via malformed TCP packets when configured to inspect certain TCP-based protocols. An unauthenticated, remote attacker can also crash an affected device, causing a denial of service condition.

Recommendations: For version 7.2.2, consider temporarily disabling the inspection of TCP-based protocols to minimize the risk of exploitation. Restrict access to the device to minimize the risk of remote attackers sending malformed TCP packets. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2007-0959

Affected Products

Cisco Asa 5500 Series Security Appliances

Cisco Asa

Cisco Pix 500 Series Security Appliances

References · 11

• http://secunia.com/advisories/24160 · Vendor Advisory
• http://securitytracker.com/id?1017651 · Patch
• http://cisco.com/en/US/products/products_security_advisory09186a00807e2484.shtml · Vendor Advisory
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20070214-CVE-2007-0959 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-0959 · Security Note
• http://securityfocus.com/bid/22562 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/32488 · Note
• http://osvdb.org/33062 · Note
• http://securityfocus.com/bid/22561 · Note
• http://vupen.com/english/advisories/2007/0608 · Note
• http://securitytracker.com/id?1017652 · Note