PT-2009-3714 · Cisco · Cisco Pix Security Appliances+1

Published

2009-04-08

·

Updated

2009-04-28

·

CVE-2009-1155

CVSS v2.0

7.8

High

VectorAV:N/AC:L/Au:N/C:C/I:N/A:N
Name of the Vulnerable Software and Affected Versions Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances versions 7.1(1) through 7.1(2)82 Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances versions 7.2 before 7.2(4)27 Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances versions 8.0 before 8.0(4)25 Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances versions 8.1 before 8.1(2)15
Description The issue allows remote attackers to bypass authentication and establish a VPN session to an ASA device via unspecified vectors when AAA override-account-disable is entered in a general-attributes field. Multiple vulnerabilities exist in the Cisco ASA 5500 Series Adaptive Security Appliances and Cisco PIX Security Appliances.
Recommendations For versions 7.1(1) through 7.1(2)82, update to a version after 7.1(2)82 to resolve the issue. For versions 7.2 before 7.2(4)27, update to version 7.2(4)27 or later to resolve the issue. For versions 8.0 before 8.0(4)25, update to version 8.0(4)25 or later to resolve the issue. For versions 8.1 before 8.1(2)15, update to version 8.1(2)15 or later to resolve the issue. As a temporary workaround, consider restricting access to the AAA override-account-disable field in the general-attributes to minimize the risk of exploitation.

Fix

Improper Authentication

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2009-1155

Affected Products

Cisco Asa
Cisco Pix Security Appliances