PT-2010-1722 · Cisco · Cisco Asa

Published 2010-06-29 · Updated 2010-06-30 · CVE-2009-4919

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cisco Adaptive Security Appliances (ASA) 5580 series devices versions prior to 8.1(2)

Description A buffer overflow issue allows remote attackers to have an unspecified impact via long IKE attributes.

Recommendations For versions prior to 8.1(2), update to version 8.1(2) or later to resolve the issue.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2009-4919

Affected Products

Cisco Asa

References · 2

• http://cisco.com/en/US/docs/security/asa/asa81/release/notes/asarn812.html · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2009-4919 · Security Note