PT-2007-3786 · Cisco · Cisco Asa+1

Ryan Giobbi · Published 2007-05-02 · Updated 2023-08-11 · CVE-2007-2462

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cisco Adaptive Security Appliance (ASA) and PIX version 7.2 before 7.2(2)8

Description The issue concerns an unspecified vulnerability that allows remote attackers to bypass LDAP authentication and gain privileges when using Layer 2 Tunneling Protocol (L2TP) or Remote Management Access. Additionally, there are multiple vulnerabilities, including LDAP authentication bypass vulnerabilities and denial of service (DoS) vulnerabilities.

Recommendations For Cisco Adaptive Security Appliance (ASA) and PIX version 7.2 before 7.2(2)8, update to version 7.2(2)8 or later to resolve the issue. As a temporary workaround, consider restricting access to Remote Management and L2TP to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2007-2462

Affected Products

Cisco Asa

Pix

References · 11

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20070502-asa · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-2462 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34020 · Note
• http://osvdb.org/35331 · Note
• http://kb.cert.org/vuls/id/210876 · Note
• http://vupen.com/english/advisories/2007/1636 · Note
• http://securitytracker.com/id?1017995 · Note
• http://cisco.com/en/US/products/products_security_advisory09186a0080833166.shtml · Patch, Vendor Advisory
• http://securitytracker.com/id?1017994 · Note
• http://secunia.com/advisories/25109 · Note
• http://securityfocus.com/bid/23768 · Note