PT-2007-3787 · Cisco · Cisco Asa+1

Published 2007-05-02 · Updated 2023-08-11 · CVE-2007-2463

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco Adaptive Security Appliance (ASA) and PIX versions 7.1 before 7.1(2)49 Cisco Adaptive Security Appliance (ASA) and PIX versions 7.2 before 7.2(2)17

Description The issue allows remote attackers to cause a denial of service, resulting in a device reload. This is related to VPN connection termination and password expiry. Additionally, there are Lightweight Directory Access Protocol (LDAP) authentication bypass vulnerabilities and denial of service (DoS) vulnerabilities.

Recommendations For Cisco Adaptive Security Appliance (ASA) and PIX versions 7.1 before 7.1(2)49, update to version 7.1(2)49 or later. For Cisco Adaptive Security Appliance (ASA) and PIX versions 7.2 before 7.2(2)17, update to version 7.2(2)17 or later.

Fix

Related Identifiers

CVE-2007-2463

Affected Products

Cisco Asa

Pix

References · 8

• http://vupen.com/english/advisories/2007/1636 · Vendor Advisory
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20070502-asa · Vendor Advisory
• http://cisco.com/en/US/products/products_security_advisory09186a0080833166.shtml · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-2463 · Security Note
• http://osvdb.org/35332 · Note
• http://secunia.com/advisories/25109 · Note
• http://securityfocus.com/bid/23768 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34021 · Note