Cisco PIX and Cisco ASA Multiple Denial of Service and Unauthorized Access Vulnerabilities
BID:29541
Info
Cisco PIX and Cisco ASA Multiple Denial of Service and Unauthorized Access Vulnerabilities
| Bugtraq ID: | 29541 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: |
CVE-2008-2055 CVE-2008-2056 CVE-2008-2057 CVE-2008-2058 CVE-2008-2059 |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 04 2008 12:00AM |
| Updated: | Jun 04 2008 12:00AM |
| Credit: | The vendor reported these issues. |
| Vulnerable: |
Cisco PIX/ASA 7.2.2 Cisco PIX/ASA 8.1 Cisco PIX/ASA 8.0(3) Cisco PIX/ASA 8.0(2) Cisco PIX/ASA 8.0 Cisco PIX/ASA 8.0 Cisco PIX/ASA 7.2.(2.8) Cisco PIX/ASA 7.2.(2.7) Cisco PIX/ASA 7.2.(2.19) Cisco PIX/ASA 7.2.(2.17) Cisco PIX/ASA 7.2.(2.16) Cisco PIX/ASA 7.2(3)006 Cisco PIX/ASA 7.2(2.24) Cisco PIX/ASA 7.2(2.15) Cisco PIX/ASA 7.2(2.14) Cisco PIX/ASA 7.2(2.10) Cisco PIX/ASA 7.2(2) Cisco PIX/ASA 7.2(1.22) Cisco PIX/ASA 7.2(1) Cisco PIX/ASA 7.1.(2.49) Cisco PIX/ASA 7.1.(2.48) Cisco PIX/ASA 7.1(2.5) Cisco PIX/ASA 7.1(2.27) Cisco PIX/ASA 7.1(2) Cisco PIX/ASA 7.1 (2.55) |
| Not Vulnerable: |
Cisco PIX/ASA 7.0.4 .3 Cisco PIX/ASA 7.0.4 Cisco PIX/ASA 7.0.1 .4 Cisco PIX/ASA 7.0 Cisco PIX/ASA 8.1(1)2 Cisco PIX/ASA 8.1(1)1 Cisco PIX/ASA 8.0(3)9 Cisco PIX/ASA 8.0(3)10 Cisco PIX/ASA 8.0(2)17 Cisco PIX/ASA 7.2(4) Cisco PIX/ASA 7.2(3)2 Cisco PIX/ASA 7.1(2)70 |
Discussion
Cisco PIX and Cisco ASA Multiple Denial of Service and Unauthorized Access Vulnerabilities
Cisco PIX and Cisco ASA are prone to multiple denial-of-service vulnerabilities and an unauthorized-access vulnerability.
An attacker can exploit these issues to bypass ACL lists and to cause an affected device to reboot or crash.
Cisco PIX and Cisco ASA are prone to multiple denial-of-service vulnerabilities and an unauthorized-access vulnerability.
An attacker can exploit these issues to bypass ACL lists and to cause an affected device to reboot or crash.
Exploit / POC
Cisco PIX and Cisco ASA Multiple Denial of Service and Unauthorized Access Vulnerabilities
To exploit these issues, attackers can use readily available network utilities.
To exploit these issues, attackers can use readily available network utilities.
Solution / Fix
Cisco PIX and Cisco ASA Multiple Denial of Service and Unauthorized Access Vulnerabilities
Solution:
The vendor has released updates. Please see the referenced advisory for more information.
Solution:
The vendor has released updates. Please see the referenced advisory for more information.
References
Cisco PIX and Cisco ASA Multiple Denial of Service and Unauthorized Access Vulnerabilities
References:
References:
- Cisco Applied Mitigation Bulletin: Identifying and Mitigating Exploitation of th (Cisco)
- Cisco Homepage (Cisco )
- Cisco Security Advisory: Multiple Vulnerabilities in Cisco PIX and Cisco ASA (Cisco Systems Product Security Incident Response Team
- cisco-sa-20080604-asa Cisco Security Advisory: Multiple Vulnerabilities in Cisco (Cisco)