PT-2009-3717 · Cisco · Cisco Asa 5500 Series+1

Published 2009-04-08 · Updated 2009-04-28 · CVE-2009-1158

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco Adaptive Security Appliances (ASA) 5500 Series devices versions 7.0 through 7.0(8)5 Cisco Adaptive Security Appliances (ASA) 5500 Series devices versions 7.1 through 7.1(2)81 Cisco Adaptive Security Appliances (ASA) 5500 Series devices versions 7.2 through 7.2(4)25 Cisco Adaptive Security Appliances (ASA) 5500 Series devices versions 8.0 through 8.0(4)23 Cisco Adaptive Security Appliances (ASA) 5500 Series devices versions 8.1 through 8.1(2)13

Description The issue allows remote attackers to cause a denial of service (device reload) via a crafted H.323 packet when H.323 inspection is enabled. Multiple vulnerabilities exist in the Cisco ASA 5500 Series Adaptive Security Appliances.

Recommendations For versions 7.0 through 7.0(8)5, update to version 7.0(8)6 or later. For versions 7.1 through 7.1(2)81, update to version 7.1(2)82 or later. For versions 7.2 through 7.2(4)25, update to version 7.2(4)26 or later. For versions 8.0 through 8.0(4)23, update to version 8.0(4)24 or later. For versions 8.1 through 8.1(2)13, update to version 8.1(2)14 or later. As a temporary workaround, consider disabling H.323 inspection until a patch is available.

Fix

Related Identifiers

CVE-2009-1158

Affected Products

Cisco Asa 5500 Series

Cisco Asa

References · 8

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20090408-asa · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-1158 · Security Note
• http://cisco.com/en/US/products/products_security_advisory09186a0080a994f6.shtml · Vendor Advisory
• http://securitytracker.com/id?1022015 · Note
• http://osvdb.org/53444 · Note
• http://secunia.com/advisories/34607 · Note
• http://securityfocus.com/bid/34429 · Note
• http://vupen.com/english/advisories/2009/0981 · Note