PT-2009-3745 · Cisco · Cisco Asa

Published 2009-06-24 · Updated 2018-10-10 · CVE-2009-1201

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Cisco Adaptive Security Appliances (ASA) versions prior to 8.0.4(34) Cisco Adaptive Security Appliances (ASA) versions prior to 8.1.2(25) Cisco Adaptive Security Appliances (ASA) versions prior to 8.2.1(3)

Description The issue allows remote attackers to bypass a DOM wrapper and conduct cross-site scripting (XSS) attacks by setting CSCO WebVPN['process'] to the name of a crafted function. This is related to an eval injection vulnerability in the csco wrap js function in /+CSCOL+/cte.js in WebVPN on the Cisco Adaptive Security Appliances (ASA) device. The vulnerability can be exploited when the device is configured to accept Clientless SSL VPN connections.

Recommendations For versions prior to 8.0.4(34), update to version 8.0.4(34) or later. For versions prior to 8.1.2(25), update to version 8.1.2(25) or later. For versions prior to 8.2.1(3), update to version 8.2.1(3) or later. As a temporary workaround, consider restricting access to the WebVPN feature until a patch is applied.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2009-1201

Affected Products

Cisco Asa

References · 10

• 🔥 https://exploit-db.com/exploits/33055 · Exploit
• 🔥 http://securityfocus.com/bid/35476 · Exploit
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20090624-CVE-2009-1201 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-1201 · Security Note
• http://securitytracker.com/id?1022457 · Note
• http://vupen.com/english/advisories/2009/1713 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1201 · Note
• https://trustwave.com/spiderlabs/advisories/TWSL2009-002.txt · Note
• http://secunia.com/advisories/35511 · Note
• http://securityfocus.com/archive/1/504516/100/0/threaded · Note