PT-2007-2395 · Cisco · Cisco Pix 500 Series Security Appliances+2

Published 2007-02-14 · Updated 2018-10-30 · CVE-2007-0960

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Cisco PIX 500 and ASA 5500 Series Security Appliances version 7.2.2

Description: The issue allows remote authenticated users to gain elevated privileges on the device via unspecified vectors when configured to use the LOCAL authentication method. This could enable an authenticated, remote attacker to gain elevated privileges.

Recommendations: For version 7.2.2, consider disabling the LOCAL authentication method as a temporary workaround until a patch is available. Restrict access to the device to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2007-0960

Affected Products

Cisco Asa 5500 Series Security Appliances

Cisco Asa

Cisco Pix 500 Series Security Appliances

References · 12

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20070214-CVE-2007-0960 · Vendor Advisory
• http://secunia.com/advisories/24160 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-0960 · Security Note
• http://securitytracker.com/id?1017651 · Patch
• http://cisco.com/en/US/products/products_security_advisory09186a00807e2484.shtml · Vendor Advisory
• http://osvdb.org/33063 · Note
• http://securityfocus.com/bid/22562 · Note
• http://secunia.com/advisories/24179 · Note
• http://securityfocus.com/bid/22561 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/32489 · Note
• http://vupen.com/english/advisories/2007/0608 · Note
• http://securitytracker.com/id?1017652 · Note