Cisco PIX and Cisco ASA Multiple Denial of Service and Information Disclosure Vulnerabilities
BID:30998
Info
Cisco PIX and Cisco ASA Multiple Denial of Service and Information Disclosure Vulnerabilities
| Bugtraq ID: | 30998 |
| Class: | Unknown |
| CVE: |
CVE-2008-2732 CVE-2008-2733 CVE-2008-2734 CVE-2008-2735 CVE-2008-2736 |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 03 2008 12:00AM |
| Updated: | Sep 03 2008 07:35PM |
| Credit: | Reported by the vendor |
| Vulnerable: |
Cisco PIX/ASA 7.2.2 Cisco PIX/ASA 7.0.4 .3 Cisco PIX/ASA 7.0.4 Cisco PIX/ASA 7.0.1 .4 Cisco PIX/ASA 7.0 Cisco PIX/ASA 8.1(1)2 Cisco PIX/ASA 8.1(1)1 Cisco PIX/ASA 8.1 Cisco PIX/ASA 8.0(3)9 Cisco PIX/ASA 8.0(3)10 Cisco PIX/ASA 8.0(3) Cisco PIX/ASA 8.0(2)17 Cisco PIX/ASA 8.0(2) Cisco PIX/ASA 8.0 Cisco PIX/ASA 8.0 Cisco PIX/ASA 7.2.(2.8) Cisco PIX/ASA 7.2.(2.7) Cisco PIX/ASA 7.2.(2.19) Cisco PIX/ASA 7.2.(2.17) Cisco PIX/ASA 7.2.(2.16) Cisco PIX/ASA 7.2(4) Cisco PIX/ASA 7.2(3)2 Cisco PIX/ASA 7.2(3)006 Cisco PIX/ASA 7.2(2.24) Cisco PIX/ASA 7.2(2.15) Cisco PIX/ASA 7.2(2.14) Cisco PIX/ASA 7.2(2.10) Cisco PIX/ASA 7.2(2) Cisco PIX/ASA 7.2(1.22) Cisco PIX/ASA 7.2(1) Cisco PIX/ASA 7.2 Cisco PIX/ASA 7.1.(2.49) Cisco PIX/ASA 7.1.(2.48) Cisco PIX/ASA 7.1(2.5) Cisco PIX/ASA 7.1(2.27) Cisco PIX/ASA 7.1(2)70 Cisco PIX/ASA 7.1(2) Cisco PIX/ASA 7.1 (2.55) Cisco PIX/ASA 7.1 Cisco PIX/ASA 7.0 |
| Not Vulnerable: |
Cisco PIX/ASA 8.1(1)5 Cisco PIX/ASA 8.1(1)4 Cisco PIX/ASA 8.0(3)15 Cisco PIX/ASA 8.0(3)14 Cisco PIX/ASA 7.2(4)7 Cisco PIX/ASA 7.2(4)2 Cisco PIX/ASA 7.1(2)71 Cisco PIX/ASA 7.0(7)16 |
Discussion
Cisco PIX and Cisco ASA Multiple Denial of Service and Information Disclosure Vulnerabilities
Cisco PIX and ASA are prone to multiple denial-of-service vulnerabilities and an information-disclosure vulnerability.
An attacker can exploit these issues to obtain sensitive information or cause the affected devices to reload.
Cisco PIX and ASA are prone to multiple denial-of-service vulnerabilities and an information-disclosure vulnerability.
An attacker can exploit these issues to obtain sensitive information or cause the affected devices to reload.
Exploit / POC
Cisco PIX and Cisco ASA Multiple Denial of Service and Information Disclosure Vulnerabilities
To exploit these issues, attackers can use readily available network utilities.
To exploit these issues, attackers can use readily available network utilities.
Solution / Fix
Cisco PIX and Cisco ASA Multiple Denial of Service and Information Disclosure Vulnerabilities
Solution:
The vendor has released updates and an advisory. Please see the referenced advisory for more information.
Solution:
The vendor has released updates and an advisory. Please see the referenced advisory for more information.
References
Cisco PIX and Cisco ASA Multiple Denial of Service and Information Disclosure Vulnerabilities
References:
References: