PT-2007-3788 · Cisco · Cisco Asa+1

Published 2007-05-02 · Updated 2023-08-11 · CVE-2007-2464

Positive Technologies (AI Summary)

CVSS v2.0

7.1

High

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco Adaptive Security Appliance (ASA) and PIX versions 7.1 before 7.1(2)49 Cisco Adaptive Security Appliance (ASA) and PIX versions 7.2 before 7.2(2)19

Description The issue is related to a race condition when using clientless SSL VPNs, allowing remote attackers to cause a denial of service (device reload) via non-standard SSL sessions. Additionally, multiple vulnerabilities exist in the Cisco Adaptive Security Appliance (ASA) and PIX security appliances, including Lightweight Directory Access Protocol (LDAP) authentication bypass vulnerabilities and denial of service (DoS) vulnerabilities.

Recommendations For versions 7.1 before 7.1(2)49, update to version 7.1(2)49 or later to resolve the issue. For versions 7.2 before 7.2(2)19, update to version 7.2(2)19 or later to resolve the issue. As a temporary workaround, consider restricting the use of clientless SSL VPNs until a patch is available. Restrict access to LDAP authentication to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2007-2464

Affected Products

Cisco Asa

Pix

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2007-2464 · Security Note
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20070502-asa · Vendor Advisory
• http://cisco.com/en/US/products/products_security_advisory09186a0080833166.shtml · Vendor Advisory
• http://osvdb.org/35333 · Note
• http://vupen.com/english/advisories/2007/1636 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34023 · Note
• http://kb.cert.org/vuls/id/337508 · Note
• http://secunia.com/advisories/25109 · Note
• http://securityfocus.com/bid/23768 · Note