PT-2009-3719 · Cisco · Cisco Asa 5500 Series+2

Published 2009-04-08 · Updated 2009-04-28 · CVE-2009-1160

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances versions 7.0 through 7.0(8)1 Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances versions 7.1 through 7.1(2)74 Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances versions 7.2 through 7.2(4)9 Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances versions 8.0 through 8.0(4)5

Description The issue is related to the improper implementation of the implicit deny statement, which might allow remote attackers to successfully send packets that bypass intended access restrictions. Multiple vulnerabilities exist in the Cisco ASA 5500 Series Adaptive Security Appliances and Cisco PIX Security Appliances.

Recommendations For versions 7.0 through 7.0(8)1, update to version 7.0(8)1 or later. For versions 7.1 through 7.1(2)74, update to version 7.1(2)74 or later. For versions 7.2 through 7.2(4)9, update to version 7.2(4)9 or later. For versions 8.0 through 8.0(4)5, update to version 8.0(4)5 or later.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2009-1160

Affected Products

Cisco Asa 5500 Series

Cisco Asa

Cisco Pix Security Appliances

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2009-1160 · Security Note
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20090408-asa · Vendor Advisory
• http://cisco.com/en/US/products/products_security_advisory09186a0080a994f6.shtml · Vendor Advisory
• http://securitytracker.com/id?1022017 · Note
• http://secunia.com/advisories/34607 · Note
• http://securityfocus.com/bid/34429 · Note
• http://vupen.com/english/advisories/2009/0981 · Note